Vulnerability-Lookup

RHSA-2026:24761

Vulnerability from csaf_redhat - Published: 2026-06-09 11:19 - Updated: 2026-09-19 12:15

Summary

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Severity

Important

Notes

Topic: An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language. Security Fix(es): * automation-controller: Cryptography: Buffer overflow via non-contiguous buffer in API (CVE-2026-39892) * automation-controller: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922) * automation-gateway: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization (CVE-2025-62718) * automation-gateway: Vite: Information disclosure via WebSocket connection bypasses access control (CVE-2026-39363) * automation-gateway: node-forge: Denial of Service via infinite loop in BigInteger.modInverse() (CVE-2026-33891) * automation-gateway: Forge: Signature Forgery via Weak RSASSA PKCS#1 v1.5 Verification (CVE-2026-33894) * automation-gateway: Forge: Authentication bypass via forged Ed25519 cryptographic signatures (CVE-2026-33895) * automation-gateway: Forge (node-forge): Certificate validation bypass allows unauthorized certificate issuance (CVE-2026-33896) * automation-gateway: path-to-regexp: Denial of Service via crafted regular expressions (CVE-2026-4926) * automation-gateway: Minimatch: Denial of Service via catastrophic backtracking in glob expressions (CVE-2026-27904) * automation-gateway: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996) * automation-gateway-proxy: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * automation-gateway-proxy: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) * python3.12-click: Arbitrary command execution via command injection in click.edit() (CVE-2026-7246) * python3.12-cryptography: Buffer overflow via non-contiguous buffer in API (CVE-2026-39892) * python3.12-pillow: Denial of Service via decompression bomb in FITS image processing (CVE-2026-40192) * receptor: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) * receptor: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) * receptor: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details about this release, refer to the release notes listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-62718

A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.

7.0 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 2 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260422-3.el8ap.noarch		—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260422-3.el9ap.noarch		—	Vendor Fix fix Workaround

Known not affected 236 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.29-2.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.5-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.5-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.5-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.5-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260422-3.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.5-1.el8ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.29-2.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.5-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.5-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.5-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.5-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260422-3.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.5-1.el9ap.noarch	—	Workaround

Threats

Impact Important

CVE-2026-4926

A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 2 products, the same list as for CVE-2025-62718

Known not affected 236 products, the same list as for CVE-2025-62718

Threats

Impact Important

CVE-2026-7246

A flaw was found in Pallets Click. This command injection vulnerability, located in the click.edit() function, allows an attacker with an unprivileged account to execute arbitrary operating system (OS) commands. This could lead to unauthorized control over the affected system.

7.2 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el8ap.src	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el8ap.src	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el8ap.src	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el9ap.src	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el9ap.src	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el9ap.src	—	Vendor Fix fix

Known not affected 226 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.29-2.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.29-2.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.5-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.5-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.5-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.5-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.29-2.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.29-2.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.29-2.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260422-3.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260422-3.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.5-1.el8ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.29-2.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.29-2.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.5-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.5-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.5-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.5-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.29-2.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.29-2.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.29-2.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260422-3.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260422-3.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.5-1.el9ap.noarch		—

Threats

Impact Important

CVE-2026-26996

A flaw was found in minimatch. A remote attacker could exploit this Regular Expression Denial of Service (ReDoS) vulnerability by providing a specially crafted glob pattern. This pattern, containing numerous consecutive wildcard characters, causes excessive processing and exponential backtracking in the regular expression engine. Successful exploitation leads to a Denial of Service (DoS), making the application unresponsive.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 2 products, the same list as for CVE-2025-62718

Known not affected 236 products, the same list as for CVE-2025-62718

Threats

Impact Moderate

CVE-2026-27904

A flaw was found in minimatch. A remote attacker could exploit this vulnerability by providing a specially crafted glob expression with nested unbounded quantifiers. This could lead to catastrophic backtracking in the V8 JavaScript engine, causing the application to become unresponsive and resulting in a Denial of Service (DoS).

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 2 products, the same list as for CVE-2025-62718

Known not affected 236 products, the same list as for CVE-2025-62718

Threats

Impact Moderate

CVE-2026-30922

An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.x86_64	—	Vendor Fix fix Workaround

Known not affected 230 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.29-2.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.5-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.5-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.5-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.5-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260422-3.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260422-3.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.5-1.el8ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.29-2.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.5-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.5-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.5-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.5-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260422-3.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260422-3.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.5-1.el9ap.noarch	—	Workaround

Threats

Impact Important

CVE-2026-32280

A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 22 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.5-1.el8ap.src	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.5-1.el8ap.src	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.aarch64	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.s390x	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.x86_64	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.aarch64	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.s390x	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.src	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.x86_64	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.5-1.el9ap.src	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.5-1.el9ap.src	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.aarch64	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.ppc64le	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.s390x	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.x86_64	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.aarch64	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.ppc64le	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.s390x	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.src	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.x86_64	—	Vendor Fix fix

Known not affected 216 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.29-2.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.29-2.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.5-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.5-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.29-2.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.29-2.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.29-2.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260422-3.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260422-3.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.5-1.el8ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.29-2.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.29-2.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.5-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.5-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.29-2.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.29-2.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.29-2.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260422-3.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260422-3.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.5-1.el9ap.noarch		—

Threats

Impact Important

CVE-2026-32282

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Affected products

Fixed 14 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.5-1.el8ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.5-1.el8ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.5-1.el9ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.5-1.el9ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.x86_64	—	Vendor Fix fix Workaround

Known not affected 224 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.29-2.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.5-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.5-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260422-3.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260422-3.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.5-1.el8ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.29-2.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.5-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.5-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260422-3.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260422-3.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.5-1.el9ap.noarch	—	Workaround

Threats

Impact Moderate

CVE-2026-32283

A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-764 - Multiple Locks of a Critical Resource

Affected products

Fixed 22 products, the same list as for CVE-2026-32280

Known not affected 216 products, the same list as for CVE-2026-32280

Threats

Impact Important

CVE-2026-33891

A flaw was found in the node-forge library, a JavaScript implementation of Transport Layer Security. This vulnerability, inherited from the bundled jsbn library, allows a remote attacker to cause a Denial of Service (DoS). When the BigInteger.modInverse() function is called with a zero value, it enters an infinite loop, causing the process to hang indefinitely and consume 100% of the CPU resources.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 2 products, the same list as for CVE-2025-62718

Known not affected 236 products, the same list as for CVE-2025-62718

Threats

Impact Important

CVE-2026-33894

A flaw was found in Forge (also called `node-forge`), a JavaScript implementation of Transport Layer Security. A remote attacker could exploit weaknesses in the RSASSA PKCS#1 v1.5 signature verification process. By crafting malicious signatures that include extra data within the ASN structure and do not meet padding requirements, an attacker can bypass signature validation. This allows for the creation of forged signatures that appear legitimate, potentially compromising the integrity and authenticity of communications.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 2 products, the same list as for CVE-2025-62718

Known not affected 236 products, the same list as for CVE-2025-62718

Threats

Impact Important

CVE-2026-33895

A flaw was found in Forge (also called `node-forge`), a JavaScript library used for Transport Layer Security (TLS). The library's Ed25519 signature verification process does not correctly validate cryptographic signatures, allowing forged non-canonical signatures to be accepted. A remote attacker could exploit this signature malleability to bypass authentication and authorization logic. This vulnerability can also circumvent security checks in applications that rely on the uniqueness of cryptographic signatures for functions such as deduplication or preventing replay attacks.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Fixed 2 products, the same list as for CVE-2025-62718

Known not affected 236 products, the same list as for CVE-2025-62718

Threats

Impact Important

CVE-2026-33896

A flaw was found in Forge (also known as node-forge), a JavaScript implementation of Transport Layer Security (TLS). The `pki.verifyCertificateChain()` function does not properly enforce certificate validation rules. This oversight allows an intermediate certificate that lacks specific security extensions to enable any leaf certificate to function as a Certificate Authority (CA) and sign other certificates. Consequently, node-forge could accept these unauthorized certificates as valid, potentially leading to spoofing or the issuance of illegitimate certificates.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 2 products, the same list as for CVE-2025-62718

Known not affected 236 products, the same list as for CVE-2025-62718

Threats

Impact Important

CVE-2026-39363

A flaw was found in Vite, a frontend tooling framework. A remote attacker can exploit this vulnerability by connecting to the Vite development server's WebSocket without an Origin header. This allows the attacker to invoke the fetchModule function, enabling them to retrieve the contents of arbitrary files on the server. This information disclosure can lead to unauthorized access to sensitive data.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-1220 - Insufficient Granularity of Access Control

Affected products

Fixed 2 products, the same list as for CVE-2025-62718

Known not affected 236 products, the same list as for CVE-2025-62718

Threats

Impact Important

CVE-2026-39892

A flaw was found in the cryptography library. This vulnerability occurs when a non-contiguous buffer is passed to certain application programming interfaces (APIs) that accept Python buffers, such as Hash.update(). A remote attacker could exploit this to cause a buffer overflow, potentially leading to a denial of service.

7.3 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-131 - Incorrect Calculation of Buffer Size

Affected products

Fixed 38 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64	—	Vendor Fix fix Workaround

Known not affected 200 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.29-2.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.5-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.5-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.5-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.5-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260422-3.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260422-3.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.5-1.el8ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.29-2.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.5-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.5-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.5-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.5-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260422-3.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260422-3.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.5-1.el9ap.noarch	—	Workaround

Threats

Impact Important

CVE-2026-40192

A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library's failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)

Affected products

Fixed 10 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el8ap.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.src	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-0:12.2.0-1.el9ap.x86_64	—	Vendor Fix fix Workaround

Known not affected 228 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.29-2.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.5-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.5-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.5-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.5-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.29-2.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260422-3.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-6.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260422-3.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.5-1.el8ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.29-2.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-click-0:8.3.3-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.5-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.5-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-click-0:8.3.3-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.5-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.5-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-automation-platform-installer-0:2.5-23.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.29-2.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.29-2.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.29-2.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260422-3.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260422-3.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.14-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260422-3.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.15-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-click-0:8.3.3-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debuginfo-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-cryptography-debugsource-0:46.0.7-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.15-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debuginfo-0:12.2.0-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pillow-debugsource-0:12.2.0-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.61-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.5-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.5-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.5-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.5-1.el9ap.noarch	—	Workaround

Threats

Impact Important

References

128 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:24761	self
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2441268	external
https://bugzilla.redhat.com/show_bug.cgi?id=2442922	external
https://bugzilla.redhat.com/show_bug.cgi?id=2448553	external
https://bugzilla.redhat.com/show_bug.cgi?id=2451867	external
https://bugzilla.redhat.com/show_bug.cgi?id=2452450	external
https://bugzilla.redhat.com/show_bug.cgi?id=2452457	external
https://bugzilla.redhat.com/show_bug.cgi?id=2452458	external
https://bugzilla.redhat.com/show_bug.cgi?id=2452464	external
https://bugzilla.redhat.com/show_bug.cgi?id=2456179	external
https://bugzilla.redhat.com/show_bug.cgi?id=2456336	external
https://bugzilla.redhat.com/show_bug.cgi?id=2456338	external
https://bugzilla.redhat.com/show_bug.cgi?id=2456339	external
https://bugzilla.redhat.com/show_bug.cgi?id=2456735	external
https://bugzilla.redhat.com/show_bug.cgi?id=2456913	external
https://bugzilla.redhat.com/show_bug.cgi?id=2458856	external
https://bugzilla.redhat.com/show_bug.cgi?id=2464121	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-62718	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456913	external
https://www.cve.org/CVERecord?id=CVE-2025-62718	external
https://nvd.nist.gov/vuln/detail/CVE-2025-62718	external
https://datatracker.ietf.org/doc/html/rfc1034#sec…	external
https://datatracker.ietf.org/doc/html/rfc3986#sec…	external
https://github.com/axios/axios/commit/fb3befb6daa…	external
https://github.com/axios/axios/pull/10661	external
https://github.com/axios/axios/releases/tag/v1.15.0	external
https://github.com/axios/axios/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-4926	self
https://bugzilla.redhat.com/show_bug.cgi?id=2451867	external
https://www.cve.org/CVERecord?id=CVE-2026-4926	external
https://nvd.nist.gov/vuln/detail/CVE-2026-4926	external
https://cna.openjsf.org/security-advisories.html	external
https://access.redhat.com/security/cve/CVE-2026-7246	self
https://bugzilla.redhat.com/show_bug.cgi?id=2464121	external
https://www.cve.org/CVERecord?id=CVE-2026-7246	external
https://nvd.nist.gov/vuln/detail/CVE-2026-7246	external
https://github.com/pallets/click/releases/tag/8.3.3	external
https://github.com/tsigouris007/security-advisori…	external
https://access.redhat.com/security/cve/CVE-2026-26996	self
https://bugzilla.redhat.com/show_bug.cgi?id=2441268	external
https://www.cve.org/CVERecord?id=CVE-2026-26996	external
https://nvd.nist.gov/vuln/detail/CVE-2026-26996	external
https://github.com/isaacs/minimatch/commit/2e111f…	external
https://github.com/isaacs/minimatch/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-27904	self
https://bugzilla.redhat.com/show_bug.cgi?id=2442922	external
https://www.cve.org/CVERecord?id=CVE-2026-27904	external
https://nvd.nist.gov/vuln/detail/CVE-2026-27904	external
https://github.com/isaacs/minimatch/security/advi…	external
https://access.redhat.com/security/cve/CVE-2026-30922	self
https://bugzilla.redhat.com/show_bug.cgi?id=2448553	external
https://www.cve.org/CVERecord?id=CVE-2026-30922	external
https://nvd.nist.gov/vuln/detail/CVE-2026-30922	external
https://github.com/pyasn1/pyasn1/commit/25ad481c1…	external
https://github.com/pyasn1/pyasn1/security/advisor…	external
https://access.redhat.com/security/cve/CVE-2026-32280	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456339	external
https://www.cve.org/CVERecord?id=CVE-2026-32280	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32280	external
https://go.dev/cl/758320	external
https://go.dev/issue/78282	external
https://groups.google.com/g/golang-announce/c/0uY…	external
https://pkg.go.dev/vuln/GO-2026-4947	external
https://access.redhat.com/security/cve/CVE-2026-32282	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456336	external
https://www.cve.org/CVERecord?id=CVE-2026-32282	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32282	external
https://go.dev/cl/763761	external
https://go.dev/issue/78293	external
https://pkg.go.dev/vuln/GO-2026-4864	external
https://access.redhat.com/security/cve/CVE-2026-32283	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456338	external
https://www.cve.org/CVERecord?id=CVE-2026-32283	external
https://nvd.nist.gov/vuln/detail/CVE-2026-32283	external
https://go.dev/cl/763767	external
https://go.dev/issue/78334	external
https://pkg.go.dev/vuln/GO-2026-4870	external
https://access.redhat.com/security/cve/CVE-2026-33891	self
https://bugzilla.redhat.com/show_bug.cgi?id=2452450	external
https://www.cve.org/CVERecord?id=CVE-2026-33891	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33891	external
https://github.com/digitalbazaar/forge/commit/9bb…	external
https://github.com/digitalbazaar/forge/security/a…	external
https://access.redhat.com/security/cve/CVE-2026-33894	self
https://bugzilla.redhat.com/show_bug.cgi?id=2452464	external
https://www.cve.org/CVERecord?id=CVE-2026-33894	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33894	external
https://datatracker.ietf.org/doc/html/rfc2313#section-8	external
https://github.com/digitalbazaar/forge/security/a…	external
https://mailarchive.ietf.org/arch/msg/openpgp/5rn…	external
https://www.rfc-editor.org/rfc/rfc8017.html	external
https://access.redhat.com/security/cve/CVE-2026-33895	self
https://bugzilla.redhat.com/show_bug.cgi?id=2452457	external
https://www.cve.org/CVERecord?id=CVE-2026-33895	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33895	external
https://datatracker.ietf.org/doc/html/rfc8032#sec…	external
https://github.com/digitalbazaar/forge/commit/bde…	external
https://github.com/digitalbazaar/forge/security/a…	external
https://access.redhat.com/security/cve/CVE-2026-33896	self
https://bugzilla.redhat.com/show_bug.cgi?id=2452458	external
https://www.cve.org/CVERecord?id=CVE-2026-33896	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33896	external
https://github.com/digitalbazaar/forge/commit/2e4…	external
https://github.com/digitalbazaar/forge/security/a…	external
https://access.redhat.com/security/cve/CVE-2026-39363	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456179	external
https://www.cve.org/CVERecord?id=CVE-2026-39363	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39363	external
https://github.com/vitejs/vite/security/advisorie…	external
https://access.redhat.com/security/cve/CVE-2026-39892	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456735	external
https://www.cve.org/CVERecord?id=CVE-2026-39892	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39892	external
http://www.openwall.com/lists/oss-security/2026/0…	external
https://github.com/pyca/cryptography/commit/622d6…	external
https://github.com/pyca/cryptography/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-40192	self
https://bugzilla.redhat.com/show_bug.cgi?id=2458856	external
https://www.cve.org/CVERecord?id=CVE-2026-40192	external
https://nvd.nist.gov/vuln/detail/CVE-2026-40192	external
https://github.com/python-pillow/Pillow/commit/3c…	external
https://github.com/python-pillow/Pillow/pull/9521	external
https://github.com/python-pillow/Pillow/security/…	external
https://pillow.readthedocs.io/en/stable/releaseno…	external

JSON

To clipboard

Loading 1.7 MB of JSON…

CVE-2026-33896 (GCVE-0-2026-33896)

Vulnerability from cvelistv5 – Published: 2026-03-27 20:50 – Updated: 2026-09-04 12:04

Title

Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)

Summary

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, `pki.verifyCertificateChain()` does not enforce RFC 5280 basicConstraints requirements when an intermediate certificate lacks both the `basicConstraints` and `keyUsage` extensions. This allows any leaf certificate (without these extensions) to act as a CA and sign other certificates, which node-forge will accept as valid. Version 1.4.0 patches the issue.

Severity

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-03-30 18:53 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

GitHub_M mitre root

References

9 references

URL	Tags
https://github.com/digitalbazaar/forge/security/a…	x_refsource_CONFIRM
https://github.com/digitalbazaar/forge/commit/2e4…	x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2026-33896	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2452458	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:24761	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34342	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:9742	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:13826	vendor-advisoryx_refsource_REDHAT

Impacted products

19 products

Vendor	Product	Version
digitalbazaar	forge	Affected: < 1.4.0
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:2.5.20260422-3.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:2.5.20260422-3.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Cluster Observability Operator 1.5.0	Unaffected: 1782839279 , < * (rpm) cpe:/a:redhat:cluster_observability_operator:1.5::el9
Red Hat	Red Hat Developer Hub 1.8	Unaffected: 1776784286 , < * (rpm) cpe:/a:redhat:rhdh:1.8::el9
Red Hat	Red Hat Developer Hub 1.9	Unaffected: 1777903262 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Logging Subsystem for Red Hat OpenShift	cpe:/a:redhat:logging:5
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat build of Apache Camel - HawtIO 4	cpe:/a:redhat:apache_camel_hawtio:4
Red Hat	Red Hat build of Apicurio Registry 2	cpe:/a:redhat:service_registry:2
Red Hat	Red Hat Build of Podman Desktop	cpe:/a:redhat:podman_desktop:1
Red Hat	Red Hat Data Grid 8	cpe:/a:redhat:jboss_data_grid:8
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Fuse 7	cpe:/a:redhat:jboss_fuse:7
Red Hat	Red Hat Process Automation 7	cpe:/a:redhat:jboss_enterprise_bpms_platform:7
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-33896",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-30T18:53:46.442762Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-30T18:53:50.510Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-2328-f5f3-gj25"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260422-3.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260422-3.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9",
            "product": "Cluster Observability Operator 1.5.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782839279",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776784286",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777903262",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "io.cryostat-cryostat",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/elasticsearch6-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/elasticsearch-operator-bundle",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/elasticsearch-proxy-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/elasticsearch-rhel9-operator",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/kibana6-rhel8",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/logging-curator5-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-eda-controller",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-platform-ui",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apache_camel_hawtio:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "io.hawt-project",
            "product": "Red Hat build of Apache Camel - HawtIO 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_registry:2"
            ],
            "defaultStatus": "affected",
            "packageName": "io.apicurio-apicurio-registry",
            "product": "Red Hat build of Apicurio Registry 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:1"
            ],
            "defaultStatus": "affected",
            "packageName": "podman-desktop-macos-1-0",
            "product": "Red Hat Build of Podman Desktop",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:1"
            ],
            "defaultStatus": "affected",
            "packageName": "podman-desktop-windows-1-0",
            "product": "Red Hat Build of Podman Desktop",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_data_grid:8"
            ],
            "defaultStatus": "affected",
            "packageName": "org.infinispan-infinispan-console",
            "product": "Red Hat Data Grid 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "pcs",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "grafana",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "pcs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_fuse:7"
            ],
            "defaultStatus": "affected",
            "packageName": "io.apicurio-apicurito",
            "product": "Red Hat Fuse 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_fuse:7"
            ],
            "defaultStatus": "affected",
            "packageName": "io.syndesis-syndesis-parent",
            "product": "Red Hat Fuse 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "org.uberfire-uberfire-parent",
            "product": "Red Hat Process Automation 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-03-27T20:50:03.418Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in Forge (also known as node-forge), a JavaScript implementation of Transport Layer Security (TLS). The `pki.verifyCertificateChain()` function does not properly enforce certificate validation rules. This oversight allows an intermediate certificate that lacks specific security extensions to enable any leaf certificate to function as a Certificate Authority (CA) and sign other certificates. Consequently, node-forge could accept these unauthorized certificates as valid, potentially leading to spoofing or the issuance of illegitimate certificates."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.4,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-295",
                "description": "Improper Certificate Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-04T12:04:50.960Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-33896"
          },
          {
            "name": "RHBZ#2452458",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452458"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33896.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24761"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34342"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:9742"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:13826"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:9742: Red Hat Developer Hub 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:13826: Red Hat Developer Hub 1.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-03-27T21:02:22.762Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-03-27T20:50:03.418Z",
            "value": "Made public."
          }
        ],
        "title": "node-forge: Forge (node-forge): Certificate validation bypass allows unauthorized certificate issuance",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "forge",
          "vendor": "digitalbazaar",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.4.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, `pki.verifyCertificateChain()` does not enforce RFC 5280 basicConstraints requirements when an intermediate certificate lacks both the `basicConstraints` and `keyUsage` extensions. This allows any leaf certificate (without these extensions) to act as a CA and sign other certificates, which node-forge will accept as valid. Version 1.4.0 patches the issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295: Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-27T20:50:03.418Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-2328-f5f3-gj25",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-2328-f5f3-gj25"
        },
        {
          "name": "https://github.com/digitalbazaar/forge/commit/2e492832fb25227e6b647cbe1ac981c123171e90",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/digitalbazaar/forge/commit/2e492832fb25227e6b647cbe1ac981c123171e90"
        }
      ],
      "source": {
        "advisory": "GHSA-2328-f5f3-gj25",
        "discovery": "UNKNOWN"
      },
      "title": "Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-33896",
    "datePublished": "2026-03-27T20:50:03.418Z",
    "dateReserved": "2026-03-24T15:41:47.490Z",
    "dateUpdated": "2026-09-04T12:04:50.960Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-39363 (GCVE-0-2026-39363)

Vulnerability from cvelistv5 – Published: 2026-04-07 19:10 – Updated: 2026-08-25 12:05

Title

Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket

Summary

Vite is a frontend tooling framework for JavaScript. From 6.0.0 to before 6.4.2, 7.3.2, and 8.0.5, if it is possible to connect to the Vite dev server’s WebSocket without an Origin header, an attacker can invoke fetchModule via the custom WebSocket event vite:invoke and combine file://... with ?raw (or ?inline) to retrieve the contents of arbitrary files on the server as a JavaScript string (e.g., export default "..."). The access control enforced in the HTTP request path (such as server.fs.allow) is not applied to this WebSocket-based execution path. This vulnerability is fixed in 6.4.2, 7.3.2, and 8.0.5.

Severity

8.2 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-08 17:52 UTC

CWE

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
CWE-306 - Missing Authentication for Critical Function
CWE-1220 - Insufficient Granularity of Access Control

Assigner

GitHub_M mitre root

References

8 references

URL	Tags
https://github.com/vitejs/vite/security/advisorie…	x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2026-39363	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2456179	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:24761	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24762	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24866	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:59153	vendor-advisoryx_refsource_REDHAT

Impacted products

15 products

Vendor	Product	Version
vitejs	vite	Affected: >= 8.0.0, < 8.0.5 Affected: >= 7.0.0, < 7.3.2 Affected: >= 6.0.0, < 6.4.2
vitejs	vite-plus	Affected: < 0.1.16
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:2.5.20260422-3.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:2.5.20260422-3.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:2.6.9-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1779783248 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1787218409 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Build of Keycloak	cpe:/a:redhat:build_keycloak:
Red Hat	Red Hat Build of Podman Desktop	cpe:/a:redhat:podman_desktop:1
Red Hat	Red Hat Build of Podman Desktop - Tech Preview	cpe:/a:redhat:podman_desktop:0
Red Hat	Red Hat JBoss Enterprise Application Platform 8	cpe:/a:redhat:jboss_enterprise_application_platform:8
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack	cpe:/a:redhat:jbosseapxp
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-39363",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-08T17:52:54.234521Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-08T17:52:58.420Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/vitejs/vite/security/advisories/GHSA-p9ff-h696-f583"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260422-3.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260422-3.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-platform-ui",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.6.9-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-tech-preview/mcp-server-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779783248",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-27/gateway-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.7",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787218409",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhacs-eng/release-main",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-controller",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-eda-controller",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:build_keycloak:"
            ],
            "defaultStatus": "affected",
            "packageName": "vite",
            "product": "Red Hat Build of Keycloak",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:1"
            ],
            "defaultStatus": "affected",
            "packageName": "podman-desktop-macos-1-0",
            "product": "Red Hat Build of Podman Desktop",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:1"
            ],
            "defaultStatus": "affected",
            "packageName": "podman-desktop-windows-1-0",
            "product": "Red Hat Build of Podman Desktop",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/bootc-ext",
            "product": "Red Hat Build of Podman Desktop - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/openshift-local-ext",
            "product": "Red Hat Build of Podman Desktop - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:0"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/rhel-ext",
            "product": "Red Hat Build of Podman Desktop - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_application_platform:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "vite",
            "product": "Red Hat JBoss Enterprise Application Platform 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jbosseapxp"
            ],
            "defaultStatus": "unaffected",
            "packageName": "vite",
            "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/art-images",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-04-07T19:10:44.916Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in Vite, a frontend tooling framework. A remote attacker can exploit this vulnerability by connecting to the Vite development server\u0027s WebSocket without an Origin header. This allows the attacker to invoke the fetchModule function, enabling them to retrieve the contents of arbitrary files on the server. This information disclosure can lead to unauthorized access to sensitive data."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1220",
                "description": "Insufficient Granularity of Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-25T12:05:41.283Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-39363"
          },
          {
            "name": "RHBZ#2456179",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456179"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39363.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24761"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24762"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24866"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:59153"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24866: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:59153: Red Hat Ansible Automation Platform 2.7"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-04-07T20:02:11.316Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-04-07T19:10:44.916Z",
            "value": "Made public."
          }
        ],
        "title": "Vite: Vite: Information disclosure via WebSocket connection bypasses access control",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vite",
          "vendor": "vitejs",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 8.0.0, \u003c 8.0.5"
            },
            {
              "status": "affected",
              "version": "\u003e= 7.0.0, \u003c 7.3.2"
            },
            {
              "status": "affected",
              "version": "\u003e= 6.0.0, \u003c 6.4.2"
            }
          ]
        },
        {
          "product": "vite-plus",
          "vendor": "vitejs",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.1.16"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vite is a frontend tooling framework for JavaScript. From 6.0.0 to before 6.4.2, 7.3.2, and 8.0.5, if it is possible to connect to the Vite dev server\u2019s WebSocket without an Origin header, an attacker can invoke fetchModule via the custom WebSocket event vite:invoke and combine file://... with ?raw (or ?inline) to retrieve the contents of arbitrary files on the server as a JavaScript string (e.g., export default \"...\"). The access control enforced in the HTTP request path (such as server.fs.allow) is not applied to this WebSocket-based execution path. This vulnerability is fixed in 6.4.2, 7.3.2, and 8.0.5."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306: Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-07T19:10:44.916Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/vitejs/vite/security/advisories/GHSA-p9ff-h696-f583",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vitejs/vite/security/advisories/GHSA-p9ff-h696-f583"
        }
      ],
      "source": {
        "advisory": "GHSA-p9ff-h696-f583",
        "discovery": "UNKNOWN"
      },
      "title": "Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-39363",
    "datePublished": "2026-04-07T19:10:44.916Z",
    "dateReserved": "2026-04-06T21:29:17.349Z",
    "dateUpdated": "2026-08-25T12:05:41.283Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-39892 (GCVE-0-2026-39892)

Vulnerability from cvelistv5 – Published: 2026-04-08 20:49 – Updated: 2026-09-10 12:04

Title

cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

Summary

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. This vulnerability is fixed in 46.0.7.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-09 19:41 UTC

CWE

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-131 - Incorrect Calculation of Buffer Size

Assigner

GitHub_M mitre root

References

30 references

URL	Tags
https://github.com/pyca/cryptography/security/adv…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2026/0…
https://access.redhat.com/security/cve/CVE-2026-39892	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2456735	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:24761	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24762	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30089	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:30088	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24866	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20338	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43855	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43854	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43851	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43670	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43853	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:43651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:46956	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:7295	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:42644	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24977	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37275	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22840	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22629	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21017	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24853	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19375	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22465	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23361	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24483	vendor-advisoryx_refsource_REDHAT

Impacted products

49 products

Vendor	Product	Version
pyca	cryptography	Affected: >= 45.0.0, < 46.0.7
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:4.6.29-2.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:46.0.7-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:4.6.29-2.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:46.0.7-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:4.7.12-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:46.0.7-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat AI Inference Server 3.3	Unaffected: 1782353093 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.3::el9
Red Hat	Red Hat AI Inference Server 3.3	Unaffected: 1782352847 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.3::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1779762270 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1779759716 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1779734628 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1779773804 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1779761061 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1779760844 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Discovery 2	Unaffected: 1779395228 , < * (rpm) cpe:/a:redhat:discovery:2::el9
Red Hat	Red Hat Enterprise Linux AI 3.3	Unaffected: 1784670204 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.3::el9
Red Hat	Red Hat Enterprise Linux AI 3.3	Unaffected: 1784669680 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.3::el9
Red Hat	Red Hat Enterprise Linux AI 3.3	Unaffected: 1784736822 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.3::el9
Red Hat	Red Hat Enterprise Linux AI 3.3	Unaffected: 1784736941 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.3::el9
Red Hat	Red Hat Enterprise Linux AI 3.3	Unaffected: 1784736798 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.3::el9
Red Hat	Red Hat Enterprise Linux AI 3.3	Unaffected: 1784736857 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.3::el9
Red Hat	Red Hat Enterprise Linux AI 3.3	Unaffected: 1785163184 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.3::el9
Red Hat	Red Hat Hardened Images	Unaffected: 46.0.7-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1780069069 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1783701598 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782471587 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782472374 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782471606 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1779822261 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1779811412 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.14	Unaffected: 1779689392 , < * (rpm) cpe:/a:redhat:quay:3.14::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1780891395 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1779204086 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.17	Unaffected: 1779922205 , < * (rpm) cpe:/a:redhat:quay:3.17::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1779811473 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Red Hat Trusted Artifact Signer 1.4	Unaffected: 1780914886 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Lightspeed Core	cpe:/a:redhat:lightspeed_core
Red Hat	Migration Toolkit for Applications 8	cpe:/a:redhat:migration_toolkit_applications:8
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	Red Hat AI Inference Server	cpe:/a:redhat:ai_inference_server:3
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Ansible Automation Platform Ansible Core 2	cpe:/a:redhat:ansible_core:2
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	cpe:/a:redhat:enterprise_linux_ai:3
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-04-08T21:16:07.164Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/04/08/12"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-39892",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-09T19:41:57.662246Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-09T19:52:22.602Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-controller",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.6.29-2.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "python3.12-cryptography",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:46.0.7-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-controller",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.6.29-2.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python3.12-cryptography",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:46.0.7-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-controller",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:4.7.12-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python3.12-cryptography",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:46.0.7-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-rocm-rhel9",
            "product": "Red Hat AI Inference Server 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782353093",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-cuda-rhel9",
            "product": "Red Hat AI Inference Server 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782352847",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/controller-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779762270",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/eda-controller-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779759716",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/ee-supported-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779734628",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/gateway-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779773804",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/hub-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779761061",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-tech-preview/metrics-service-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779760844",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:discovery:2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "discovery/discovery-server-rhel9",
            "product": "Red Hat Discovery 2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779395228",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784670204",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784669680",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784736822",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gcp-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784736941",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784736798",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-aws-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784736857",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/disk-image-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785163184",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "python-cryptography-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "46.0.7-1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-vllm-gaudi-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780069069",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llama-stack-core-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783701598",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llama-stack-core-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782471587",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782472374",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trustyai-nemo-guardrails-server-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782471606",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779822261",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779811412",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.14::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779689392",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780891395",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779204086",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779922205",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779811473",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/model-transparency-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780914886",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lightspeed_core"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9",
            "product": "Lightspeed Core",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lightspeed_core"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/lightspeed-stack",
            "product": "Lightspeed Core",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/art-images",
            "product": "Migration Toolkit for Applications 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-lightspeed/lightspeed-ocp-rag-rhel9",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-lightspeed/lightspeed-service-api-rhel9",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/rhaiis-cpu-ubi9-3-3",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/rhaiis-rocm-ubi9-3-3",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/rhaiis-tpu-ubi9-3-3",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform-24/lightspeed-rhel8-operator",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-25/lightspeed-chatbot-rhel8",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "ansible-automation-platform-26/lightspeed-rhel9-operator",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/automation-reports",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/ee-supported-rhel8",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "redhat-user-workloads/lightspeed-chatbot-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/mcp-tools-rhel9",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_core:2"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/ee-minimal-ansible-core-2-19-rhel-8-tech-preview",
            "product": "Red Hat Ansible Automation Platform Ansible Core 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_core:2"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/ee-minimal-ansible-core-2-19-rhel-9-tech-preview",
            "product": "Red Hat Ansible Automation Platform Ansible Core 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_core:2"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/ee-minimal-ansible-core-2-20-rhel-8-tech-preview",
            "product": "Red Hat Ansible Automation Platform Ansible Core 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_core:2"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/ee-minimal-ansible-core-2-20-rhel-9-tech-preview",
            "product": "Red Hat Ansible Automation Platform Ansible Core 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "fence-agents",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "fence-agents",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/bootc-cuda-azure-3-3",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/bootc-cuda-gcp-3-3",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/bootc-rocm-azure-3-3",
            "product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-feature-server-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-agent-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-router-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-kserve-storage-initializer-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-training-cuda128-torch29-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/quay-quay-v3-12",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/quay-quay-v3-13",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/quay-quay-v3-14",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/quay-quay-v3-15",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/quay-quay-v3-16",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/quay-quay-v3-17",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/quay-quay-v3-9",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "redhat-user-workloads/iop-advisor-engine",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "redhat-user-workloads/iop-host-inventory-sat-6-18",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "affected",
            "packageName": "satellite/foreman-mcp-server-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "satellite/iop-vmaas-rhel9",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-04-08T20:49:41.967Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the cryptography library. This vulnerability occurs when a non-contiguous buffer is passed to certain application programming interfaces (APIs) that accept Python buffers, such as Hash.update(). A remote attacker could exploit this to cause a buffer overflow, potentially leading to a denial of service."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 7.3,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-131",
                "description": "Incorrect Calculation of Buffer Size",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T12:04:47.954Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-39892"
          },
          {
            "name": "RHBZ#2456735",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456735"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39892.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24761"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24762"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30089"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:30088"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24866"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20338"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43855"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43854"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43851"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43670"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43853"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:43651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:46956"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:7295"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:42644"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24977"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37275"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22840"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22629"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21017"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24853"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19375"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22465"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23361"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24483"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30089: Red Hat AI Inference Server 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:30088: Red Hat AI Inference Server 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24866: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20338: Red Hat Discovery 2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43855: Red Hat Enterprise Linux AI 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43854: Red Hat Enterprise Linux AI 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43851: Red Hat Enterprise Linux AI 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43670: Red Hat Enterprise Linux AI 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43853: Red Hat Enterprise Linux AI 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:43651: Red Hat Enterprise Linux AI 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:46956: Red Hat Enterprise Linux AI 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:7295: Red Hat Hardened Images"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37275: Red Hat OpenShift AI 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22840: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22629: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21017: Red Hat Quay 3.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24853: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19375: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22465: Red Hat Quay 3.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23361: Red Hat Quay 3.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24483: Red Hat Trusted Artifact Signer 1.4"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-04-08T22:00:59.416Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-04-08T20:49:41.967Z",
            "value": "Made public."
          }
        ],
        "title": "cryptography: Cryptography: Buffer overflow via non-contiguous buffer in API",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "cryptography",
          "vendor": "pyca",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 45.0.0, \u003c 46.0.7"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. This vulnerability is fixed in 46.0.7."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-08T20:49:41.967Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq"
        }
      ],
      "source": {
        "advisory": "GHSA-p423-j2cm-9vmq",
        "discovery": "UNKNOWN"
      },
      "title": "cryptography has a buffer overflow if non-contiguous buffers were passed to APIs"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-39892",
    "datePublished": "2026-04-08T20:49:41.967Z",
    "dateReserved": "2026-04-07T20:32:03.011Z",
    "dateUpdated": "2026-09-10T12:04:47.954Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-40192 (GCVE-0-2026-40192)

Vulnerability from cvelistv5 – Published: 2026-04-15 22:53 – Updated: 2026-09-10 12:04

Title

Pillow is vulnerable to a FITS GZIP decompression bomb

Summary

Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks. A specially crafted FITS file could cause unbounded memory consumption, leading to denial of service (OOM crash or severe performance degradation). If users are unable to immediately upgrade, they should only open specific image formats, excluding FITS, as a workaround.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-16 13:37 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling
CWE-400 - Uncontrolled Resource Consumption
CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)

Assigner

GitHub_M mitre root

References

35 references

URL	Tags
https://github.com/python-pillow/Pillow/security/…	x_refsource_CONFIRM
https://github.com/python-pillow/Pillow/pull/9521	x_refsource_MISC
https://github.com/python-pillow/Pillow/commit/3c…	x_refsource_MISC
https://pillow.readthedocs.io/en/stable/releaseno…	x_refsource_MISC
https://access.redhat.com/security/cve/CVE-2026-40192	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2458856	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:24761	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27076	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24762	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34366	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34368	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:34365	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61628	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61627	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61629	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16008	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16030	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16009	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16174	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24866	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17611	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17609	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24977	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65126	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19712	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37275	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22840	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22629	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:21017	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24853	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19375	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:22465	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23361	vendor-advisoryx_refsource_REDHAT

Impacted products

59 products

Vendor	Product	Version
python-pillow	Pillow	Affected: >= 10.3.0, < 12.2.0
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:12.2.0-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:12.2.0-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:12.2.0-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Satellite 6.16 for RHEL 8	Unaffected: 0:12.2.0-1.el8pc , < * (rpm) cpe:/a:redhat:satellite:6.16::el8 cpe:/a:redhat:satellite_capsule:6.16::el8
Red Hat	Red Hat Satellite 6.16 for RHEL 9	Unaffected: 0:12.2.0-1.el9pc , < * (rpm) cpe:/a:redhat:satellite:6.16::el9 cpe:/a:redhat:satellite_capsule:6.16::el9
Red Hat	Red Hat Satellite 6.17 for RHEL 9	Unaffected: 0:12.2.0-1.el9pc , < * (rpm) cpe:/a:redhat:satellite:6.17::el9 cpe:/a:redhat:satellite_capsule:6.17::el9
Red Hat	Red Hat Satellite 6.18 for RHEL 9	Unaffected: 0:12.2.0-1.el9pc , < * (rpm) cpe:/a:redhat:satellite:6.18::el9 cpe:/a:redhat:satellite_capsule:6.18::el9
Red Hat	Red Hat Satellite 6.19 for RHEL 9	Unaffected: 0:12.2.0-1.el9pc , < * (rpm) cpe:/a:redhat:satellite:6.19::el9 cpe:/a:redhat:satellite_capsule:6.19::el9
Red Hat	Red Hat AI Inference Server 3.2	Unaffected: 1787860580 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.2::el9
Red Hat	Red Hat AI Inference Server 3.2	Unaffected: 1787772157 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.2::el9
Red Hat	Red Hat AI Inference Server 3.2	Unaffected: 1787884873 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.2::el9
Red Hat	Red Hat AI Inference Server 3.3	Unaffected: 1778244559 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.3::el9
Red Hat	Red Hat AI Inference Server 3.3	Unaffected: 1778244531 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.3::el9
Red Hat	Red Hat AI Inference Server 3.3	Unaffected: 1778274666 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.3::el9
Red Hat	Red Hat AI Inference Server 3.3	Unaffected: 1778244546 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.3::el9
Red Hat	Red Hat AI Inference Server 3.4	Unaffected: 1787151840 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.4::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1779761061 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1780102732 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Enterprise Linux AI 3.3	Unaffected: 1778690639 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.3::el9
Red Hat	Red Hat Enterprise Linux AI 3.3	Unaffected: 1778677633 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.3::el9
Red Hat	Red Hat Enterprise Linux AI 3.3	Unaffected: 1778677632 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.3::el9
Red Hat	Red Hat Enterprise Linux AI 3.3	Unaffected: 1778677745 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.3::el9
Red Hat	Red Hat Enterprise Linux AI 3.3	Unaffected: 1778666122 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.3::el9
Red Hat	Red Hat Enterprise Linux AI 3.3	Unaffected: 1778666124 , < * (rpm) cpe:/a:redhat:enterprise_linux_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1780388133 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1786711151 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778677779 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778677692 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778262893 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778677701 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778677741 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778677767 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1779123334 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778263128 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778782933 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778677718 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778677716 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778263054 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778677734 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778677667 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778677717 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1778677722 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782472374 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat OpenShift AI 3.3	Unaffected: 1782471606 , < * (rpm) cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat	Red Hat Quay 3.10	Unaffected: 1779822261 , < * (rpm) cpe:/a:redhat:quay:3.10::el8
Red Hat	Red Hat Quay 3.12	Unaffected: 1779811412 , < * (rpm) cpe:/a:redhat:quay:3.12::el8
Red Hat	Red Hat Quay 3.14	Unaffected: 1779689392 , < * (rpm) cpe:/a:redhat:quay:3.14::el8
Red Hat	Red Hat Quay 3.15	Unaffected: 1780891395 , < * (rpm) cpe:/a:redhat:quay:3.15::el8
Red Hat	Red Hat Quay 3.16	Unaffected: 1779204086 , < * (rpm) cpe:/a:redhat:quay:3.16::el9
Red Hat	Red Hat Quay 3.17	Unaffected: 1779922205 , < * (rpm) cpe:/a:redhat:quay:3.17::el9
Red Hat	Red Hat Quay 3.9	Unaffected: 1779811473 , < * (rpm) cpe:/a:redhat:quay:3.9::el8
Red Hat	Lightspeed Core	cpe:/a:redhat:lightspeed_core
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	Red Hat AI Inference Server	cpe:/a:redhat:ai_inference_server:3
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40192",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-16T13:37:11.864898Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-16T13:37:19.918Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "python3.12-pillow",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:12.2.0-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python3.12-pillow",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:12.2.0-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python3.12-pillow",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:12.2.0-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el8",
              "cpe:/a:redhat:satellite_capsule:6.16::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "python-pillow",
            "product": "Red Hat Satellite 6.16 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:12.2.0-1.el8pc",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.16::el9",
              "cpe:/a:redhat:satellite_capsule:6.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python-pillow",
            "product": "Red Hat Satellite 6.16 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:12.2.0-1.el9pc",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.17::el9",
              "cpe:/a:redhat:satellite_capsule:6.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python-pillow",
            "product": "Red Hat Satellite 6.17 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:12.2.0-1.el9pc",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.18::el9",
              "cpe:/a:redhat:satellite_capsule:6.18::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python3.12-pillow",
            "product": "Red Hat Satellite 6.18 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:12.2.0-1.el9pc",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6.19::el9",
              "cpe:/a:redhat:satellite_capsule:6.19::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python3.12-pillow",
            "product": "Red Hat Satellite 6.19 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:12.2.0-1.el9pc",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-cuda-rhel9",
            "product": "Red Hat AI Inference Server 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787860580",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/model-opt-cuda-rhel9",
            "product": "Red Hat AI Inference Server 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787772157",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.2::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-rocm-rhel9",
            "product": "Red Hat AI Inference Server 3.2",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787884873",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/model-opt-cuda-rhel9",
            "product": "Red Hat AI Inference Server 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778244559",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-rocm-rhel9",
            "product": "Red Hat AI Inference Server 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778244531",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-cuda-rhel9",
            "product": "Red Hat AI Inference Server 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778274666",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-spyre-rhel9",
            "product": "Red Hat AI Inference Server 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778244546",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3.4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaii/vllm-spyre-rhel9",
            "product": "Red Hat AI Inference Server 3.4",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787151840",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/hub-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779761061",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/lightspeed-chatbot-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780102732",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/disk-image-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778690639",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-aws-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778677633",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778677632",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-azure-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778677745",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778666122",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-gcp-cuda-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778677632",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhelai3/bootc-rocm-rhel9",
            "product": "Red Hat Enterprise Linux AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778666124",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-caikit-tgis-serving-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780388133",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-vllm-rocm-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1786711151",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778677779",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778677692",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778262893",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778677701",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778677741",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778677767",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-training-cuda128-torch29-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779123334",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-training-rocm64-torch29-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778263128",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778782933",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778677718",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778677716",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778263054",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778677734",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778677667",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778677717",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778677722",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782472374",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:3.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-trustyai-nemo-guardrails-server-rhel9",
            "product": "Red Hat OpenShift AI 3.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1782471606",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.10::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779822261",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.12::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.12",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779811412",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.14::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.14",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779689392",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.15::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.15",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1780891395",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779204086",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.17::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel9",
            "product": "Red Hat Quay 3.17",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779922205",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:quay:3.9::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779811473",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:lightspeed_core"
            ],
            "defaultStatus": "affected",
            "packageName": "lightspeed-core/rag-tool-rhel9",
            "product": "Lightspeed Core",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-lightspeed/lightspeed-ocp-rag-rhel9",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed/lightspeed-service-api-rhel9",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-cpu-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-neuron-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ai_inference_server:3"
            ],
            "defaultStatus": "affected",
            "packageName": "rhaiis/vllm-tpu-rhel9",
            "product": "Red Hat AI Inference Server",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-25/lightspeed-chatbot-rhel8",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python-pillow",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unknown",
            "packageName": "python-pillow",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "python-pillow",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-caikit-nlp-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-agent-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-controller-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-router-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-kserve-storage-initializer-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llama-stack-core-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-openvino-model-server-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-vllm-cuda-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-vllm-gaudi-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-04-15T22:53:56.147Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library\u0027s failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-409",
                "description": "Improper Handling of Highly Compressed Data (Data Amplification)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T12:04:47.474Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-40192"
          },
          {
            "name": "RHBZ#2458856",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458856"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40192.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24761"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27076"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24762"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34366"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34368"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:34365"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61628"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61627"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:61629"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:16008"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:16030"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:16009"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:16174"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24866"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17611"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17609"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24977"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65126"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19712"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37275"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22840"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22629"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:21017"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24853"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19375"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:22465"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23361"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27076: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34366: Red Hat Satellite 6.17 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34368: Red Hat Satellite 6.18 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:34365: Red Hat Satellite 6.19 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61628: Red Hat AI Inference Server 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61627: Red Hat AI Inference Server 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:61629: Red Hat AI Inference Server 3.2"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:16008: Red Hat AI Inference Server 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:16030: Red Hat AI Inference Server 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:16009: Red Hat AI Inference Server 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:16174: Red Hat AI Inference Server 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57387: Red Hat AI Inference Server 3.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24866: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17611: Red Hat Enterprise Linux AI 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17609: Red Hat Enterprise Linux AI 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37275: Red Hat OpenShift AI 3.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22840: Red Hat Quay 3.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22629: Red Hat Quay 3.12"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:21017: Red Hat Quay 3.14"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24853: Red Hat Quay 3.15"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19375: Red Hat Quay 3.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:22465: Red Hat Quay 3.17"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23361: Red Hat Quay 3.9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-04-16T00:00:49.590Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-04-15T22:53:56.147Z",
            "value": "Made public."
          }
        ],
        "title": "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Pillow",
          "vendor": "python-pillow",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 10.3.0, \u003c 12.2.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks. A specially crafted FITS file could cause unbounded memory consumption, leading to denial of service (OOM crash or severe performance degradation). If users are unable to immediately upgrade, they should only open specific image formats, excluding FITS, as a workaround."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-15T22:53:56.147Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j"
        },
        {
          "name": "https://github.com/python-pillow/Pillow/pull/9521",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/python-pillow/Pillow/pull/9521"
        },
        {
          "name": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628"
        },
        {
          "name": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb"
        }
      ],
      "source": {
        "advisory": "GHSA-whj4-6x5x-4v2j",
        "discovery": "UNKNOWN"
      },
      "title": "Pillow is vulnerable to a FITS GZIP decompression bomb"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-40192",
    "datePublished": "2026-04-15T22:53:56.147Z",
    "dateReserved": "2026-04-09T20:59:17.620Z",
    "dateUpdated": "2026-09-10T12:04:47.474Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-4926 (GCVE-0-2026-4926)

Vulnerability from cvelistv5 – Published: 2026-03-26 18:59 – Updated: 2026-09-17 12:04

Title

path-to-regexp vulnerable to Denial of Service via sequential optional groups

Summary

Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service. Patches: Fixed in version 8.4.0. Workarounds: Limit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-03-27 19:44 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-1333 - Inefficient Regular Expression Complexity

Assigner

openjs redhat root

References

22 references

URL	Tags
https://cna.openjsf.org/security-advisories.html
https://access.redhat.com/security/cve/CVE-2026-4926	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2451867	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:24761	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24762	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:17789	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19409	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19410	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24866	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:13545	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:9742	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:13826	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40945	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:40118	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:50300	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65126	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10175	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:9385	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10172	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:10153	vendor-advisoryx_refsource_REDHAT

Impacted products

58 products

Vendor	Product	Version
path-to-regexp	path-to-regexp	Affected: 8.0.0 , < 8.4.0 (semver) Unaffected: 8.4.0 (semver)
Red Hat	Cryostat 4 on RHEL 9	Unaffected: 4.2.0-9 , < * (rpm) cpe:/a:redhat:cryostat:4::el9
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:2.5.20260422-3.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:2.5.20260422-3.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:2.6.9-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Migration Toolkit for Virtualization 2.1	Unaffected: 1779139872 , < * (rpm) cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9
Red Hat	Migration Toolkit for Virtualization 2.9	Unaffected: 1778927462 , < * (rpm) cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1777386606 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1779773804 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Developer Hub 1.8	Unaffected: 1776784286 , < * (rpm) cpe:/a:redhat:rhdh:1.8::el9
Red Hat	Red Hat Developer Hub 1.9	Unaffected: 1777903262 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502765 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.0	Unaffected: 1783502438 , < * (rpm) cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194938 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784194574 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el10
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784126822 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Edge Manager 1.1	Unaffected: 1784127736 , < * (rpm) cpe:/a:redhat:edge_manager:1.1::el9
Red Hat	Red Hat Migration Toolkit for Applications 8.1	Unaffected: 1785169013 , < * (rpm) cpe:/a:redhat:migration_toolkit_applications:8.1::el9
Red Hat	Red Hat OpenShift AI 2.25	Unaffected: 1787801527 , < * (rpm) cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.27	Unaffected: 1776744110 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.27::el9
Red Hat	Red Hat OpenShift Dev Spaces 3.27	Unaffected: 1776795400 , < * (rpm) cpe:/a:redhat:openshift_devspaces:3.27::el9
Red Hat	Red Hat OpenShift distributed tracing 3.9.3	Unaffected: 1776435608 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.9::el9
Red Hat	Red Hat Trusted Artifact Signer 1.3	Unaffected: 1776673130 , < * (rpm) Unaffected: 1776889929 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.3::el9
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Logging Subsystem for Red Hat OpenShift	cpe:/a:redhat:logging:5
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	Network Observability Operator	cpe:/a:redhat:network_observ_optr:1
Red Hat	OpenShift Lightspeed	cpe:/a:redhat:openshift_lightspeed
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Service Mesh 2	cpe:/a:redhat:service_mesh:2
Red Hat	OpenShift Service Mesh 3	cpe:/a:redhat:service_mesh:3
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat AMQ Broker 7	cpe:/a:redhat:amq_broker:7
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2
Red Hat	Red Hat build of Apache Camel - HawtIO 4	cpe:/a:redhat:apache_camel_hawtio:4
Red Hat	Red Hat build of Apicurio Registry 2	cpe:/a:redhat:service_registry:2
Red Hat	Red Hat Build of Podman Desktop	cpe:/a:redhat:podman_desktop:1
Red Hat	Red Hat Data Grid 8	cpe:/a:redhat:jboss_data_grid:8
Red Hat	Red Hat Developer Hub	cpe:/a:redhat:rhdh:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Fuse 7	cpe:/a:redhat:jboss_fuse:7
Red Hat	Red Hat JBoss Enterprise Application Platform 7	cpe:/a:redhat:jboss_enterprise_application_platform:7
Red Hat	Red Hat JBoss Enterprise Application Platform 8	cpe:/a:redhat:jboss_enterprise_application_platform:8
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack	cpe:/a:redhat:jbosseapxp
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat Openshift Data Foundation 4	cpe:/a:redhat:openshift_data_foundation:4
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat Process Automation 7	cpe:/a:redhat:jboss_enterprise_bpms_platform:7
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat Satellite 6	cpe:/a:redhat:satellite:6
Red Hat	Red Hat Single Sign-On 7	cpe:/a:redhat:red_hat_single_sign_on:7
Red Hat	Red Hat Trusted Profile Analyzer	cpe:/a:redhat:trusted_profile_analyzer:2
Red Hat	Self-service automation portal 2	cpe:/a:redhat:ansible_portal:2

Credits

uug4na blakeembrey UlisesGascon

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-4926",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-27T19:44:44.790485Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-27T19:44:53.294Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "cryostat/cryostat-openshift-console-plugin-rhel9",
            "product": "Cryostat 4 on RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "4.2.0-9",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260422-3.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-gateway",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.5.20260422-3.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-platform-ui",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:2.6.9-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
            "product": "Migration Toolkit for Virtualization 2.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779139872",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9",
            "product": "Migration Toolkit for Virtualization 2.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1778927462",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-tech-preview/mcp-server-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777386606",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform-26/gateway-rhel9",
            "product": "Red Hat Ansible Automation Platform 2.6",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1779773804",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.8::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776784286",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/rhdh-hub-rhel9",
            "product": "Red Hat Developer Hub 1.9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1777903262",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-ocp-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502765",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1783502438",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-ocp-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194938",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel10",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784194574",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-ocp-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784126822",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhem/flightctl-ui-rhel9",
            "product": "Red Hat Edge Manager 1.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1784127736",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "mta/mta-ui-rhel9",
            "product": "Red Hat Migration Toolkit for Applications 8.1",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1785169013",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai:2.25::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
            "product": "Red Hat OpenShift AI 2.25",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1787801527",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.27::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/code-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.27",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776744110",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3.27::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "devspaces/jetbrains-ide-rhel9",
            "product": "Red Hat OpenShift Dev Spaces 3.27",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776795400",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhosdt/tempo-jaeger-query-rhel9",
            "product": "Red Hat OpenShift distributed tracing 3.9.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776435608",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://catalog.redhat.com/software/containers/",
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhtas/rhtas-console-ui-rhel9",
            "product": "Red Hat Trusted Artifact Signer 1.3",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776673130",
                "versionType": "rpm"
              },
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "1776889929",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "io.cryostat-cryostat",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/elasticsearch6-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/elasticsearch-operator-bundle",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/elasticsearch-proxy-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/elasticsearch-rhel9-operator",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/kibana6-rhel8",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:logging:5"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-logging/logging-curator5-rhel9",
            "product": "Logging Subsystem for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "packageName": "multicluster-engine/console-mce-rhel9",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:network_observ_optr:1"
            ],
            "defaultStatus": "unaffected",
            "packageName": "network-observability/network-observability-console-plugin-rhel9",
            "product": "Network Observability Operator",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_lightspeed"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-lightspeed/lightspeed-console-plugin-rhel9",
            "product": "OpenShift Lightspeed",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel8",
            "product": "OpenShift Service Mesh 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-operator-bundle",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel9",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_mesh:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift-service-mesh/kiali-rhel9-operator",
            "product": "OpenShift Service Mesh 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "packageName": "rhacm2/console-rhel9",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "advanced-cluster-security/rhacs-main-rhel8",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7"
            ],
            "defaultStatus": "affected",
            "packageName": "amq7-tech-preview/amq-broker-jolokia-api-server-rhel9",
            "product": "Red Hat AMQ Broker 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:amq_broker:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "org.jolokia-jolokia-parent",
            "product": "Red Hat AMQ Broker 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "affected",
            "packageName": "automation-controller",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "automation-eda-controller",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:apache_camel_hawtio:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "io.hawt-project",
            "product": "Red Hat build of Apache Camel - HawtIO 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:service_registry:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "io.apicurio-apicurio-registry",
            "product": "Red Hat build of Apicurio Registry 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:1"
            ],
            "defaultStatus": "affected",
            "packageName": "podman-desktop-macos-1-0",
            "product": "Red Hat Build of Podman Desktop",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:podman_desktop:1"
            ],
            "defaultStatus": "affected",
            "packageName": "podman-desktop-windows-1-0",
            "product": "Red Hat Build of Podman Desktop",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_data_grid:8"
            ],
            "defaultStatus": "affected",
            "packageName": "org.infinispan-infinispan-console",
            "product": "Red Hat Data Grid 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhdh:1"
            ],
            "defaultStatus": "affected",
            "packageName": "rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor",
            "product": "Red Hat Developer Hub",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "linux-sgx",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "mozjs60",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "pcs",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "gjs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "linux-sgx",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "pcs",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_fuse:7"
            ],
            "defaultStatus": "affected",
            "packageName": "io.apicurio-apicurito",
            "product": "Red Hat Fuse 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_fuse:7"
            ],
            "defaultStatus": "affected",
            "packageName": "io.hawt-hawtio-online",
            "product": "Red Hat Fuse 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_fuse:7"
            ],
            "defaultStatus": "affected",
            "packageName": "io.hawt-project",
            "product": "Red Hat Fuse 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_fuse:7"
            ],
            "defaultStatus": "affected",
            "packageName": "io.syndesis-syndesis-parent",
            "product": "Red Hat Fuse 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_application_platform:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "io.hawt-project",
            "product": "Red Hat JBoss Enterprise Application Platform 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_application_platform:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "io.hawt-project",
            "product": "Red Hat JBoss Enterprise Application Platform 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jbosseapxp"
            ],
            "defaultStatus": "unaffected",
            "packageName": "io.hawt-project",
            "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jbosseapxp"
            ],
            "defaultStatus": "unaffected",
            "packageName": "org.keycloak-keycloak-parent",
            "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhoai/odh-mlflow-rhel9",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-agent-installer-ui-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-console",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-console-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "openshift4/ose-monitoring-plugin-rhel9",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "odf4/mcg-core-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "affected",
            "packageName": "odf4/ocs-client-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "odf4/odf-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "odf4/odf-multicluster-console-rhel9",
            "product": "Red Hat Openshift Data Foundation 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/argocd-rhel9",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift-gitops-1/console-plugin-rhel8",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "unaffected",
            "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "org.kie-process-migration-service",
            "product": "Red Hat Process Automation 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "org.uberfire-uberfire-parent",
            "product": "Red Hat Process Automation 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "unaffected",
            "packageName": "quay/quay-rhel8",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "nodejs-react-router",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:satellite:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "nodejs-react-router-dom",
            "product": "Red Hat Satellite 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:red_hat_single_sign_on:7"
            ],
            "defaultStatus": "affected",
            "packageName": "org.keycloak-keycloak-parent",
            "product": "Red Hat Single Sign-On 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:trusted_profile_analyzer:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "rhtpa/rhtpa-trustification-service-rhel9",
            "product": "Red Hat Trusted Profile Analyzer",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_portal:2"
            ],
            "defaultStatus": "affected",
            "packageName": "ansible-automation-platform/automation-portal",
            "product": "Self-service automation portal 2",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-03-26T18:59:38.000Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1333",
                "description": "Inefficient Regular Expression Complexity",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T12:04:38.293Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-4926"
          },
          {
            "name": "RHBZ#2451867",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4926.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24761"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24762"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:17789"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19409"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:19410"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24866"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:13545"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:9742"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:13826"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40945"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:40118"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:50300"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65126"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10175"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:9385"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10172"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:10153"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:17789: Cryostat 4 on RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19409: Migration Toolkit for Virtualization 2.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:19410: Migration Toolkit for Virtualization 2.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24866: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:9742: Red Hat Developer Hub 1.8"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:13826: Red Hat Developer Hub 1.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65126: Red Hat OpenShift AI 2.25"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10172: Red Hat Trusted Artifact Signer 1.3"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:10153: Red Hat Trusted Artifact Signer 1.3"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-03-26T20:03:28.427Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-03-26T18:59:38.000Z",
            "value": "Made public."
          }
        ],
        "title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
        "workarounds": [
          {
            "lang": "en",
            "value": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/path-to-regexp",
          "product": "path-to-regexp",
          "vendor": "path-to-regexp",
          "versions": [
            {
              "lessThan": "8.4.0",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "8.4.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "uug4na"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "blakeembrey"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "UlisesGascon"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Impact:\n\nA bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service.\n\nPatches:\n\nFixed in version 8.4.0.\n\nWorkarounds:\n\nLimit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns."
            }
          ],
          "value": "Impact:\n\nA bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`. The generated regex grows exponentially with the number of groups, causing denial of service.\n\nPatches:\n\nFixed in version 8.4.0.\n\nWorkarounds:\n\nLimit the number of sequential optional groups in route patterns. Avoid passing user-controlled input as route patterns."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-1333",
              "description": "CWE-1333: Inefficient Regular Expression Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-26T18:59:38.000Z",
        "orgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
        "shortName": "openjs"
      },
      "references": [
        {
          "url": "https://cna.openjsf.org/security-advisories.html"
        }
      ],
      "title": "path-to-regexp vulnerable to Denial of Service via sequential optional groups",
      "x_generator": {
        "engine": "cve-kit 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ce714d77-add3-4f53-aff5-83d477b104bb",
    "assignerShortName": "openjs",
    "cveId": "CVE-2026-4926",
    "datePublished": "2026-03-26T18:59:38.000Z",
    "dateReserved": "2026-03-26T18:36:49.229Z",
    "dateUpdated": "2026-09-17T12:04:38.293Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-7246 (GCVE-0-2026-7246)

Vulnerability from cvelistv5 – Published: 2026-04-30 13:16 – Updated: 2026-08-18 20:50 Disputed

Title

[DISPUTED] Pallets Click contains a command injection via Unsanitized Filename "click.edit()"

Summary

This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project. The original CVE record description is preserved below: Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-30 13:39 UTC

CWE

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

certcc mitre root

References

7 references

URL	Tags
https://github.com/pallets/click/releases/tag/8.3.3
https://github.com/tsigouris007/security-advisori…
https://access.redhat.com/security/cve/CVE-2026-7246	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2464121	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:24762	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24761	vendor-advisoryx_refsource_REDHAT

Impacted products

6 products

Vendor	Product	Version
Pallets Click	Click	Affected: 0 , < 8.3.3 (custom)
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:8.3.3-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:8.3.3-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 10	Unaffected: 0:8.3.3-1.el10ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el10
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:8.3.3-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2	cpe:/a:redhat:ansible_automation_platform:2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.2,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-7246",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-30T13:39:25.058670Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-77",
                "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-30T13:40:48.226Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/tsigouris007/security-advisories/security/advisories/GHSA-47fr-3ffg-hgmw"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
            ],
            "defaultStatus": "affected",
            "packageName": "python3.12-click",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:8.3.3-1.el8ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python3.12-click",
            "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:8.3.3-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
            ],
            "defaultStatus": "affected",
            "packageName": "python-click",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:8.3.3-1.el10ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "python3.12-click",
            "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:8.3.3-1.el9ap",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3.11-click",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:ansible_automation_platform:2"
            ],
            "defaultStatus": "unaffected",
            "packageName": "python3x-click",
            "product": "Red Hat Ansible Automation Platform 2",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-04-30T13:16:44.050Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in Pallets Click. This command injection vulnerability, located in the click.edit() function, allows an attacker with an unprivileged account to execute arbitrary operating system (OS) commands. This could lead to unauthorized control over the affected system."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.2,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-78",
                "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T00:40:20.632Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-7246"
          },
          {
            "name": "RHBZ#2464121",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464121"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7246.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24762"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24761"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-04-30T14:00:58.850Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-04-30T13:16:44.050Z",
            "value": "Made public."
          }
        ],
        "title": "github.com/pallets/click: Pallets Click: Arbitrary command execution via command injection in click.edit()",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Click",
          "vendor": "Pallets Click",
          "versions": [
            {
              "lessThan": "8.3.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThis CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project. The original CVE record description is preserved below:\u003c/p\u003e\u003cp\u003ePallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.\u003c/p\u003e"
            }
          ],
          "value": "This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project. The original CVE record description is preserved below:\n\nPallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-18T20:50:52.262Z",
        "orgId": "28c92f92-d60d-412d-b760-e73465c3df22",
        "shortName": "PSF"
      },
      "references": [
        {
          "url": "https://github.com/pallets/click/releases/tag/8.3.3"
        },
        {
          "url": "https://github.com/tsigouris007/security-advisories/security/advisories/GHSA-47fr-3ffg-hgmw"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "tags": [
        "disputed"
      ],
      "title": "[DISPUTED] Pallets Click contains a command injection via Unsanitized Filename \"click.edit()\"",
      "x_generator": {
        "engine": "VINCE 3.0.39",
        "env": "prod",
        "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-7246"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2026-7246",
    "datePublished": "2026-04-30T13:16:44.050Z",
    "dateReserved": "2026-04-27T17:37:48.878Z",
    "dateUpdated": "2026-08-18T20:50:52.262Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:24761

CVE-2026-33896 (GCVE-0-2026-33896)

CVE-2026-39363 (GCVE-0-2026-39363)

CVE-2026-39892 (GCVE-0-2026-39892)

CVE-2026-40192 (GCVE-0-2026-40192)

CVE-2026-4926 (GCVE-0-2026-4926)

CVE-2026-7246 (GCVE-0-2026-7246)

Tags

Sightings

Nomenclature

Related by attack behaviour