{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-111497", "tracking": { "current_release_date": "2026-10-29T00:29:22.888485Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-111497", "initial_release_date": "2026-10-21T17:28:07.314316Z", "revision_history": [ { "date": "2026-10-21T17:28:07.314316Z", "number": "1", "summary": "NCSC Score created." }, { "date": "2026-10-22T02:41:43.365391Z", "number": "2", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-10-22T13:40:15.468792Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Products connected (1)." }, { "date": "2026-10-22T13:40:17.235055Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-10-23T09:28:42.472412Z", "number": "5", "summary": "References created (1)." }, { "date": "2026-10-23T09:28:46.141912Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-10-23T09:56:13.891275Z", "number": "7", "summary": "Source created.| CVE status created. (valid)" }, { "date": "2026-10-23T12:06:03.108199Z", "number": "8", "summary": "CVSS created.| Products created (3).| References created (2).| Description created for source.| Unknown change." }, { "date": "2026-10-23T12:06:05.428360Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-10-23T12:53:47.663601Z", "number": "10", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (55).| Product Identifiers created (20).| Product Remediations created (65).| Products created (10).| References created (3).| CWES updated (1).| Vendor_assessment created." }, { "date": "2026-10-23T12:54:04.556398Z", "number": "11", "summary": "NCSC Score updated." }, { "date": "2026-10-23T14:35:06.306230Z", "number": "12", "summary": "Source created.| CVE status created. (valid)| News created (1)." }, { "date": "2026-10-23T14:35:14.709601Z", "number": "13", "summary": "NCSC Score updated." }, { "date": "2026-10-23T15:59:08.214651Z", "number": "14", "summary": "EPSS created.| Unknown change." }, { "date": "2026-10-23T16:02:33.376173Z", "number": "15", "summary": "NCSC Score updated." }, { "date": "2026-10-23T16:03:58.196384Z", "number": "16", "summary": "CVSS created.| CWES created (2).| Products created (18).| References created (3).| Description created for source.| Unknown change." }, { "date": "2026-10-23T16:04:10.894433Z", "number": "17", "summary": "NCSC Score updated." }, { "date": "2026-10-23T16:06:18.258732Z", "number": "18", "summary": "CVSS created.| Products created (3).| References created (2).| Description created for source.| Unknown change." }, { "date": "2026-10-23T16:41:52.291671Z", "number": "19", "summary": "CVSS created.| CWES created (2).| Products created (3).| References created (1).| Description created for source.| Unknown change." }, { "date": "2026-10-23T16:41:52.545887Z", "number": "20", "summary": "Unknown change." }, { "date": "2026-10-23T16:41:54.119163Z", "number": "21", "summary": "Unknown change.| Exploits created (1)." }, { "date": "2026-10-23T16:41:55.517874Z", "number": "22", "summary": "Unknown change.| Exploits removed (1)." }, { "date": "2026-10-23T16:42:00.435635Z", "number": "23", "summary": "NCSC Score updated." }, { "date": "2026-10-23T16:42:05.162251Z", "number": "24", "summary": "NCSC Score updated." }, { "date": "2026-10-23T18:36:07.718332Z", "number": "25", "summary": "CVSS created.| References created (5).| Description created for source.| Unknown change." }, { "date": "2026-10-23T18:36:08.058824Z", "number": "26", "summary": "CVSS created.| References created (5).| Description created for source.| Unknown change." }, { "date": "2026-10-23T22:47:18.022050Z", "number": "27", "summary": "References created (1)." }, { "date": "2026-10-23T23:41:21.382096Z", "number": "28", "summary": "References created (2)." }, { "date": "2026-10-24T00:02:31.546604Z", "number": "29", "summary": "CVSS created.| Products created (3).| References created (1).| Description created for source.| Unknown change." }, { "date": "2026-10-24T00:02:35.535971Z", "number": "30", "summary": "NCSC Score updated." }, { "date": "2026-10-24T00:29:28.284264Z", "number": "31", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (6).| Product Threats created (3).| Product Remediations created (3).| References created (2).| Exploitable created.| Vendor_assessment created." }, { "date": "2026-10-24T00:29:37.722360Z", "number": "32", "summary": "NCSC Score updated." }, { "date": "2026-10-24T01:31:04.191826Z", "number": "33", "summary": "NCSC Score updated." }, { "date": "2026-10-24T12:47:41.589104Z", "number": "34", "summary": "CVSS created.| CWES created (1).| Products created (16).| References created (16).| Description created for source.| Unknown change.| Product Identifiers created (14)." }, { "date": "2026-10-24T12:47:51.336927Z", "number": "35", "summary": "NCSC Score updated." }, { "date": "2026-10-24T13:06:25.065950Z", "number": "36", "summary": "References created (3)." }, { "date": "2026-10-24T15:15:15.962951Z", "number": "37", "summary": "EPSS updated." }, { "date": "2026-10-24T15:15:21.764976Z", "number": "38", "summary": "NCSC Score updated." }, { "date": "2026-10-24T18:39:30.754905Z", "number": "39", "summary": "References created (1)." }, { "date": "2026-10-25T06:18:37.273837Z", "number": "40", "summary": "References created (1)." }, { "date": "2026-10-25T13:23:40.304617Z", "number": "41", "summary": "NCSC Score updated." }, { "date": "2026-10-25T15:15:49.906304Z", "number": "42", "summary": "EPSS updated." }, { "date": "2026-10-25T15:45:03.050199Z", "number": "43", "summary": "NCSC Score updated." }, { "date": "2026-10-25T18:23:52.859082Z", "number": "44", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (6).| Product Identifiers created (6).| Product Threats created (38).| Product Remediations created (19).| Products connected (13).| Exploitable created." }, { "date": "2026-10-25T18:23:59.932755Z", "number": "45", "summary": "NCSC Score updated." }, { "date": "2026-10-26T03:39:28.565513Z", "number": "46", "summary": "References created (2)." }, { "date": "2026-10-26T04:38:51.743076Z", "number": "47", "summary": "References created (6)." }, { "date": "2026-10-26T10:33:10.850312Z", "number": "48", "summary": "Source created.| CVE status created. (valid)| News created (1)." }, { "date": "2026-10-26T10:33:13.486399Z", "number": "49", "summary": "NCSC Score updated." }, { "date": "2026-10-26T10:42:55.693344Z", "number": "50", "summary": "Source connected.| CVE status created. (valid)| Products connected (4).| References created (8)." }, { "date": "2026-10-26T10:42:58.033585Z", "number": "51", "summary": "NCSC Score updated." }, { "date": "2026-10-26T14:40:11.216164Z", "number": "52", "summary": "References created (1)." }, { "date": "2026-10-26T15:18:27.669085Z", "number": "53", "summary": "EPSS updated." }, { "date": "2026-10-26T15:20:26.558989Z", "number": "54", "summary": "NCSC Score updated." }, { "date": "2026-10-26T15:32:11.494740Z", "number": "55", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (14).| CWES updated (1)." }, { "date": "2026-10-26T15:32:13.186300Z", "number": "56", "summary": "NCSC Score updated." }, { "date": "2026-10-26T16:05:36.511841Z", "number": "57", "summary": "Source created.| CVE status created. (valid)| News created (1)." }, { "date": "2026-10-26T16:05:40.154788Z", "number": "58", "summary": "NCSC Score updated." }, { "date": "2026-10-26T16:36:37.074119Z", "number": "59", "summary": "Description created for source.| Products created (1).| Product Identifiers created (1)." }, { "date": "2026-10-26T16:56:13.700909Z", "number": "60", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| Product Identifiers created (14).| Product Remediations created (10).| Products created (4).| Product Identifiers removed (9).| References created (9).| CWES updated (1)." }, { "date": "2026-10-26T16:56:21.839455Z", "number": "61", "summary": "NCSC Score updated." }, { "date": "2026-10-26T17:05:31.422539Z", "number": "62", "summary": "Source created.| CVE status created. (valid)| News created (1)." }, { "date": "2026-10-26T18:57:49.179742Z", "number": "63", "summary": "References created (1)." }, { "date": "2026-10-26T18:59:15.311247Z", "number": "64", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (6).| Products connected (8).| References created (1).| CWES updated (1)." }, { "date": "2026-10-26T18:59:27.645656Z", "number": "65", "summary": "NCSC Score updated." }, { "date": "2026-10-26T19:03:55.433815Z", "number": "66", "summary": "Source created.| CVE status created. (valid)| Description created for source.| Products connected (6).| References created (1).| Vendor_assessment created." }, { "date": "2026-10-26T21:57:31.613650Z", "number": "67", "summary": "NCSC Score updated." }, { "date": "2026-10-27T00:24:43.090711Z", "number": "68", "summary": "Description removed for source.| Description created for source.| Products created (1).| Product Threats created (1).| Product Remediations created (1).| Products removed (6).| References removed (1).| Exploitable updated." }, { "date": "2026-10-27T06:21:19.650643Z", "number": "69", "summary": "Products created (1).| Product Identifiers created (2).| Product Threats created (2).| Product Remediations created (2).| Products connected (1)." }, { "date": "2026-10-27T12:18:29.712683Z", "number": "70", "summary": "Products connected (16).| References created (20)." }, { "date": "2026-10-27T12:18:39.067621Z", "number": "71", "summary": "NCSC Score updated." }, { "date": "2026-10-27T12:36:07.962328Z", "number": "72", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| Product Identifiers created (42).| Product Remediations created (22).| Products created (9).| Product Identifiers removed (31).| References created (9).| CWES updated (1)." }, { "date": "2026-10-27T12:36:16.012421Z", "number": "73", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| Product Identifiers created (32).| Product Remediations created (16).| Products created (6).| Product Identifiers removed (24).| References created (9).| CWES updated (1)." }, { "date": "2026-10-27T12:36:16.360442Z", "number": "74", "summary": "NCSC Score updated." }, { "date": "2026-10-27T12:37:17.399604Z", "number": "75", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| Product Identifiers created (35).| Product Remediations created (22).| Products created (9).| Product Identifiers removed (24).| References created (9).| CWES updated (1)." }, { "date": "2026-10-27T15:40:30.515924Z", "number": "76", "summary": "References created (1)." }, { "date": "2026-10-27T15:40:33.803634Z", "number": "77", "summary": "NCSC Score updated." }, { "date": "2026-10-27T20:07:47.664064Z", "number": "78", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products created (1).| Exploits created (1).| References created (1).| CWES updated (1)." }, { "date": "2026-10-27T20:07:49.341443Z", "number": "79", "summary": "NCSC Score updated." }, { "date": "2026-10-27T20:30:40.359858Z", "number": "80", "summary": "References created (2)." }, { "date": "2026-10-28T00:04:34.094136Z", "number": "81", "summary": "EPSS updated." }, { "date": "2026-10-28T00:04:38.693718Z", "number": "82", "summary": "NCSC Score updated." }, { "date": "2026-10-28T00:05:06.237695Z", "number": "83", "summary": "References created (10)." }, { "date": "2026-10-28T00:47:51.231666Z", "number": "84", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| Exploits created (1).| References created (2).| Exploitable created." }, { "date": "2026-10-28T00:47:53.334565Z", "number": "85", "summary": "NCSC Score updated." }, { "date": "2026-10-28T03:41:44.521151Z", "number": "86", "summary": "Source created.| CVE status created. (valid)" }, { "date": "2026-10-28T06:36:52.049592Z", "number": "87", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (2).| Product Remediations created (6).| Products connected (1).| References created (2).| Vendor_assessment created." }, { "date": "2026-10-28T06:36:59.442402Z", "number": "88", "summary": "NCSC Score updated." }, { "date": "2026-10-28T07:15:47.993170Z", "number": "89", "summary": "NCSC Score updated." }, { "date": "2026-10-28T08:06:02.918775Z", "number": "90", "summary": "Products connected (10).| References created (2)." }, { "date": "2026-10-28T09:30:45.125961Z", "number": "91", "summary": "Source created.| CVE status created. (valid)| News created (1)." }, { "date": "2026-10-28T11:05:31.582429Z", "number": "92", "summary": "Source created.| CVE status created. (valid)| News created (1)." }, { "date": "2026-10-28T12:37:08.868526Z", "number": "93", "summary": "Products created (2).| Product Remediations created (3).| Product Remediations removed (2).| Products removed (2)." }, { "date": "2026-10-28T12:37:54.872315Z", "number": "94", "summary": "Source created.| CVE status created. (valid)| News created (1)." }, { "date": "2026-10-28T12:53:46.737633Z", "number": "95", "summary": "Products created (18).| References created (3)." }, { "date": "2026-10-28T15:15:28.436607Z", "number": "96", "summary": "EPSS updated." }, { "date": "2026-10-28T15:15:40.898946Z", "number": "97", "summary": "NCSC Score updated." }, { "date": "2026-10-28T16:19:44.771812Z", "number": "98", "summary": "NCSC Score updated." }, { "date": "2026-10-28T18:12:51.329899Z", "number": "99", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created." }, { "date": "2026-10-28T18:32:50.319892Z", "number": "100", "summary": "CVSS created.| Products created (27).| Product Identifiers created (36).| Products connected (9)." }, { "date": "2026-10-28T18:32:56.818375Z", "number": "101", "summary": "NCSC Score updated." }, { "date": "2026-10-28T18:44:24.938821Z", "number": "102", "summary": "Description removed for source.| Description created for source." }, { "date": "2026-10-29T00:23:23.288570Z", "number": "103", "summary": "Products connected (1).| Product Identifiers created (1).| Product Threats created (2).| Product Remediations created (1)." }, { "date": "2026-10-29T00:27:43.704320Z", "number": "104", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| Product Identifiers created (42).| Product Remediations created (22).| Products created (9).| Product Identifiers removed (31).| References created (9).| CWES updated (1)." }, { "date": "2026-10-29T00:27:48.981850Z", "number": "105", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (4).| Product Identifiers created (16).| Product Remediations created (20).| Products created (6).| Product Identifiers removed (6).| References created (9).| CWES updated (1)." }, { "date": "2026-10-29T00:27:50.120831Z", "number": "106", "summary": "NCSC Score updated." }, { "date": "2026-10-29T00:27:51.333969Z", "number": "107", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| Product Identifiers created (35).| Product Remediations created (22).| Products created (9).| Product Identifiers removed (24).| References created (9).| CWES updated (1)." }, { "date": "2026-10-29T00:28:26.444315Z", "number": "108", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (4).| Product Identifiers created (22).| Product Remediations created (32).| Products created (12).| Product Identifiers removed (6).| References created (9).| CWES updated (1)." }, { "date": "2026-10-29T00:28:29.336104Z", "number": "109", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (4).| Product Identifiers created (16).| Product Remediations created (20).| Products created (6).| Product Identifiers removed (6).| References created (9).| CWES updated (1)." }, { "date": "2026-10-29T00:28:42.543806Z", "number": "110", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| Product Identifiers created (42).| Product Remediations created (22).| Products created (9).| Product Identifiers removed (31).| References created (9).| CWES updated (1)." }, { "date": "2026-10-29T00:28:47.039998Z", "number": "111", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| Product Identifiers created (42).| Product Remediations created (22).| Products created (9).| Product Identifiers removed (31).| References created (9).| CWES updated (1)." } ], "status": "interim", "version": "111" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9855726", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net_10.0_installed_on_linux:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": ".NET 10.0 installed on Linux" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9855727", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net_10.0_installed_on_mac_os:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": ".NET 10.0 installed on Mac OS" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9855725", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net_10.0_installed_on_windows:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": ".NET 10.0 installed on Windows" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9855729", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": ".NET 11.0 installed on Linux" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9855730", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": ".NET 11.0 installed on Mac OS" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9855728", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": ".NET 11.0 installed on Windows" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9855735", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net_8.0_installed_on_linux:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": ".NET 8.0 installed on Linux" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9855736", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net_8.0_installed_on_mac_os:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": ".NET 8.0 installed on Mac OS" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9855734", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net_8.0_installed_on_windows:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": ".NET 8.0 installed on Windows" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9855738", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net_9.0_installed_on_linux:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": ".NET 9.0 installed on Linux" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9855739", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net_9.0_installed_on_mac_os:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": ".NET 9.0 installed on Mac OS" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9855737", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net_9.0_installed_on_windows:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": ".NET 9.0 installed on Windows" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-5137226", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9855731", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:microsoft_visual_studio_2019_version_16.11:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Microsoft Visual Studio 2019 version 16.11" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-5137200", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Microsoft Visual Studio 2022 version 17.14" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9855732", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.11:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Microsoft Visual Studio 2026 version 18.11" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9855733", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Microsoft Visual Studio 2026 version 18.12" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/7.4", "product": { "name": "vers:microsoft/7.4", "product_id": "CSAFPID-1520004", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:powershell:7.4:-:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "PowerShell 7.4" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/7.5", "product": { "name": "vers:microsoft/7.5", "product_id": "CSAFPID-2967492", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:powershell:7.5:-:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "PowerShell 7.5" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/7.6", "product": { "name": "vers:microsoft/7.6", "product_id": "CSAFPID-6225812", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:powershell:7.6:-:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "PowerShell 7.6" } ], "category": "product_family", "name": "Developer Tools" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/11.0.0-preview1", "product": { "name": "vers:unknown/11.0.0-preview1", "product_id": "CSAFPID-9214514", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net:11.0.0:preview1:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.0-preview2", "product": { "name": "vers:unknown/11.0.0-preview2", "product_id": "CSAFPID-9214515", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net:11.0.0:preview2:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.0-preview3", "product": { "name": "vers:unknown/11.0.0-preview3", "product_id": "CSAFPID-9214516", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net:11.0.0:preview3:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.0-preview4", "product": { "name": "vers:unknown/11.0.0-preview4", "product_id": "CSAFPID-9214517", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net:11.0.0:preview4:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.0-preview5", "product": { "name": "vers:unknown/11.0.0-preview5", "product_id": "CSAFPID-9214518", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net:11.0.0:preview5:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.0-preview6", "product": { "name": "vers:unknown/11.0.0-preview6", "product_id": "CSAFPID-9214519", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net:11.0.0:preview6:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.0-preview7", "product": { "name": "vers:unknown/11.0.0-preview7", "product_id": "CSAFPID-9214520", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net:11.0.0:preview7:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.0-rc1", "product": { "name": "vers:unknown/11.0.0-rc1", "product_id": "CSAFPID-9714430", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net:11.0.0:rc1:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/11.0.0-rc2", "product": { "name": "vers:unknown/11.0.0-rc2", "product_id": "CSAFPID-9910930", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net:11.0.0:rc2:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=10.0.0|<10.0.14", "product": { "name": "vers:unknown/>=10.0.0|<10.0.14", "product_id": "CSAFPID-9910929", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=8.0.0|<8.0.33", "product": { "name": "vers:unknown/>=8.0.0|<8.0.33", "product_id": "CSAFPID-9910927", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=9.0.0|<9.0.22", "product": { "name": "vers:unknown/>=9.0.0|<9.0.22", "product_id": "CSAFPID-9910928", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": ".net" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-9886380", "product_identification_helper": { "cpe": "cpe:/a:microsoft:.net:-" } } } ], "category": "product_name", "name": "Microsoft .NET" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9881334", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:azl3_brotli_1.1.0-2:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "azl3 brotli 1.1.0-2 on Azure Linux 3.0" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-9381589", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:azl3_nodejs_24.21.0-1:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "azl3 nodejs 24.21.0-1 on Azure Linux 3.0" } ], "category": "product_family", "name": "Open Source Software" } ], "category": "vendor", "name": "Microsoft" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<=26.02-1.5.7-r2", "product": { "name": "vers:unknown/<=26.02-1.5.7-r2", "product_id": "CSAFPID-9910944", "product_identification_helper": { "cpe": "cpe:2.3:a:mcmilk:7-zip-zstd:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "7-zip-zstd" } ], "category": "vendor", "name": "mcmilk" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:netapp/>=1.0.3|<=1.2.0", "product": { "name": "vers:netapp/>=1.0.3|<=1.2.0", "product_id": "CSAFPID-9873048" } }, { "category": "product_version_range", "name": "vers:semver/1.0.3|<1.0.10", "product": { "name": "vers:semver/1.0.3|<1.0.10", "product_id": "CSAFPID-9847982" } }, { "category": "product_version_range", "name": "vers:semver/1.1.0|<1.1.1", "product": { "name": "vers:semver/1.1.0|<1.1.1", "product_id": "CSAFPID-9847983" } }, { "category": "product_version_range", "name": "vers:semver/1.2.0|<1.2.1", "product": { "name": "vers:semver/1.2.0|<1.2.1", "product_id": "CSAFPID-9847984" } }, { "category": "product_version_range", "name": "vers:unknown/1.0.4", "product": { "name": "vers:unknown/1.0.4", "product_id": "CSAFPID-618124", "product_identification_helper": { "purl": "pkg:pypi/brotli@1.0.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.6", "product": { "name": "vers:unknown/1.0.6", "product_id": "CSAFPID-618123", "product_identification_helper": { "purl": "pkg:pypi/brotli@1.0.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.7", "product": { "name": "vers:unknown/1.0.7", "product_id": "CSAFPID-618092", "product_identification_helper": { "purl": "pkg:pypi/brotli@1.0.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.8", "product": { "name": "vers:unknown/1.0.8", "product_id": "CSAFPID-5158872", "product_identification_helper": { "purl": "pkg:pypi/brotli@1.0.8" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.9", "product": { "name": "vers:unknown/1.0.9", "product_id": "CSAFPID-5158873", "product_identification_helper": { "purl": "pkg:pypi/brotli@1.0.9" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.0", "product": { "name": "vers:unknown/1.1.0", "product_id": "CSAFPID-5158874", "product_identification_helper": { "purl": "pkg:pypi/brotli@1.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0", "product": { "name": "vers:unknown/1.2.0", "product_id": "CSAFPID-5172535", "product_identification_helper": { "purl": "pkg:pypi/brotli@1.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/>=1.0.3|<1.0.10", "product": { "name": "vers:unknown/>=1.0.3|<1.0.10", "product_id": "CSAFPID-9910920", "product_identification_helper": { "cpe": "cpe:2.3:a:google:brotli:*:*:*:*:*:-:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=1.0.3|<1.2.1", "product": { "name": "vers:unknown/>=1.0.3|<1.2.1", "product_id": "CSAFPID-9853728" } }, { "category": "product_version_range", "name": "vers:unknown/>=1.1.0|<1.1.1", "product": { "name": "vers:unknown/>=1.1.0|<1.1.1", "product_id": "CSAFPID-9910921", "product_identification_helper": { "cpe": "cpe:2.3:a:google:brotli:*:*:*:*:*:-:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=1.2.0|<1.2.1", "product": { "name": "vers:unknown/>=1.2.0|<1.2.1", "product_id": "CSAFPID-9910922", "product_identification_helper": { "cpe": "cpe:2.3:a:google:brotli:*:*:*:*:*:-:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/dev/null", "product": { "name": "vers:unknown/dev/null", "product_id": "CSAFPID-5181441" } }, { "category": "product_version_range", "name": "vers:unknown/go/brotli/v1.1.1-rc0", "product": { "name": "vers:unknown/go/brotli/v1.1.1-rc0", "product_id": "CSAFPID-5181442" } }, { "category": "product_version_range", "name": "vers:unknown/go/cbrotli/v1.1.0", "product": { "name": "vers:unknown/go/cbrotli/v1.1.0", "product_id": "CSAFPID-5181443" } }, { "category": "product_version_range", "name": "vers:unknown/go/cbrotli/v1.1.0.bcr.0", "product": { "name": "vers:unknown/go/cbrotli/v1.1.0.bcr.0", "product_id": "CSAFPID-5181444" } }, { "category": "product_version_range", "name": "vers:unknown/go/cbrotli/v1.1.0.bcr.1", "product": { "name": "vers:unknown/go/cbrotli/v1.1.0.bcr.1", "product_id": "CSAFPID-5181445" } }, { "category": "product_version_range", "name": "vers:unknown/go/cbrotli/v1.1.1-rc0", "product": { "name": "vers:unknown/go/cbrotli/v1.1.1-rc0", "product_id": "CSAFPID-5181446" } }, { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-9892886" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.3", "product": { "name": "vers:unknown/v1.0.3", "product_id": "CSAFPID-4480771" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.4", "product": { "name": "vers:unknown/v1.0.4", "product_id": "CSAFPID-4480772" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.5", "product": { "name": "vers:unknown/v1.0.5", "product_id": "CSAFPID-4480773" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.6", "product": { "name": "vers:unknown/v1.0.6", "product_id": "CSAFPID-4480774" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.7", "product": { "name": "vers:unknown/v1.0.7", "product_id": "CSAFPID-4480775" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.8", "product": { "name": "vers:unknown/v1.0.8", "product_id": "CSAFPID-4544152" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.9", "product": { "name": "vers:unknown/v1.0.9", "product_id": "CSAFPID-5181447" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.0", "product": { "name": "vers:unknown/v1.1.0", "product_id": "CSAFPID-4544154" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.0rc", "product": { "name": "vers:unknown/v1.1.0rc", "product_id": "CSAFPID-5181448" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.0", "product": { "name": "vers:unknown/v1.2.0", "product_id": "CSAFPID-9845195" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.0rc1", "product": { "name": "vers:unknown/v1.2.0rc1", "product_id": "CSAFPID-5181449" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.0rc2", "product": { "name": "vers:unknown/v1.2.0rc2", "product_id": "CSAFPID-5181450" } } ], "category": "product_name", "name": "Brotli" } ], "category": "vendor", "name": "Google" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<=26.10.2.103", "product": { "name": "vers:unknown/<=26.10.2.103", "product_id": "CSAFPID-9910941", "product_identification_helper": { "cpe": "cpe:2.3:a:clickhouse:clickhouse:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "ClickHouse" } ], "category": "vendor", "name": "ClickHouse" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:broadcom/5.2.x", "product": { "name": "vers:broadcom/5.2.x", "product_id": "CSAFPID-2895890" } }, { "category": "product_version_range", "name": "vers:broadcom/9.0.x|9.1.0", "product": { "name": "vers:broadcom/9.0.x|9.1.0", "product_id": "CSAFPID-9906031" } }, { "category": "product_version_range", "name": "vers:broadcom/9.1.1", "product": { "name": "vers:broadcom/9.1.1", "product_id": "CSAFPID-9906028" } } ], "category": "product_name", "name": "Cloud Foundation" } ], "category": "vendor", "name": "VMware" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-2905027", "product_identification_helper": { "cpe": "cpe:/a:redhat:confidential_compute_attestation:1" } } } ], "category": "product_name", "name": "Confidential Compute Attestation" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/0", "product": { "name": "vers:rpm/0", "product_id": "CSAFPID-6982270", "product_identification_helper": { "cpe": "cpe:/a:redhat:exploit_intelligence:0" } } } ], "category": "product_name", "name": "Exploit Intelligence" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/6", "product": { "name": "vers:rpm/6", "product_id": "CSAFPID-1455864", "product_identification_helper": { "cpe": "cpe:/a:redhat:logging:6" } } } ], "category": "product_name", "name": "Logging Subsystem for Red Hat OpenShift" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-2942231", "product_identification_helper": { "cpe": "cpe:/a:redhat:service_mesh:3" } } } ], "category": "product_name", "name": "OpenShift Service Mesh 3" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-1508257", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2" } } } ], "category": "product_name", "name": "Red Hat Ansible Automation Platform 2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-2914823", "product_identification_helper": { "cpe": "cpe:/a:redhat:connectivity_link:1" } } } ], "category": "product_name", "name": "Red Hat Connectivity Link 1" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317175", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/10", "product": { "name": "vers:rpm/10", "product_id": "CSAFPID-2858634", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/7", "product": { "name": "vers:rpm/7", "product_id": "CSAFPID-1439315", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 7" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-1439317", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/9", "product": { "name": "vers:rpm/9", "product_id": "CSAFPID-1439319", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-5198605", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux_ai:3" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux AI (RHEL AI) 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8.4", "product": { "name": "vers:rpm/8.4", "product_id": "CSAFPID-1442666", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.4::appstream" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux AppStream AUS (v.8.4)" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8.6", "product": { "name": "vers:rpm/8.6", "product_id": "CSAFPID-1442700", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.6::appstream" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux AppStream AUS (v.8.6)" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8.4", "product": { "name": "vers:rpm/8.4", "product_id": "CSAFPID-1695147", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:8.4::baseos" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS AUS (v.8.4)" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8.6", "product": { "name": "vers:rpm/8.6", "product_id": "CSAFPID-1485273", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:8.6::baseos" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_4.1", "product": { "name": "vers:rpm/1.0.6-4.el8_4.1", "product_id": "CSAFPID-9913191", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli@1.0.6-4.el8_4.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_6.1", "product": { "name": "vers:rpm/1.0.6-4.el8_6.1", "product_id": "CSAFPID-9913138", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli@1.0.6-4.el8_6.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_8.1", "product": { "name": "vers:rpm/1.0.6-4.el8_8.1", "product_id": "CSAFPID-9913183", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli@1.0.6-4.el8_8.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-5.el8_10", "product": { "name": "vers:rpm/1.0.6-5.el8_10", "product_id": "CSAFPID-9887069", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli@1.0.6-5.el8_10?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-10.el9_8.1", "product": { "name": "vers:rpm/1.0.9-10.el9_8.1", "product_id": "CSAFPID-9887062", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli@1.0.9-10.el9_8.1?arch=src" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_2.3", "product": { "name": "vers:rpm/1.0.9-6.el9_2.3", "product_id": "CSAFPID-9913222", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli@1.0.9-6.el9_2.3?arch=src" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_4.3", "product": { "name": "vers:rpm/1.0.9-6.el9_4.3", "product_id": "CSAFPID-9913124", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli@1.0.9-6.el9_4.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-7.el9_6.3", "product": { "name": "vers:rpm/1.0.9-7.el9_6.3", "product_id": "CSAFPID-9913202", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli@1.0.9-7.el9_6.3?arch=src" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-6.el10_0.3", "product": { "name": "vers:rpm/1.1.0-6.el10_0.3", "product_id": "CSAFPID-9913139", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli@1.1.0-6.el10_0.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-8.el10_2.1", "product": { "name": "vers:rpm/1.1.0-8.el10_2.1", "product_id": "CSAFPID-9887146", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli@1.1.0-8.el10_2.1?arch=src" } } } ], "category": "product_name", "name": "brotli" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_4.1", "product": { "name": "vers:rpm/1.0.6-4.el8_4.1", "product_id": "CSAFPID-9913186", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debuginfo@1.0.6-4.el8_4.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_6.1", "product": { "name": "vers:rpm/1.0.6-4.el8_6.1", "product_id": "CSAFPID-9913133", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debuginfo@1.0.6-4.el8_6.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_8.1", "product": { "name": "vers:rpm/1.0.6-4.el8_8.1", "product_id": "CSAFPID-9913174", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debuginfo@1.0.6-4.el8_8.1?arch=ppc64le" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-5.el8_10", "product": { "name": "vers:rpm/1.0.6-5.el8_10", "product_id": "CSAFPID-9887064", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debuginfo@1.0.6-5.el8_10?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-10.el9_8.1", "product": { "name": "vers:rpm/1.0.9-10.el9_8.1", "product_id": "CSAFPID-9887056", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debuginfo@1.0.9-10.el9_8.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_2.3", "product": { "name": "vers:rpm/1.0.9-6.el9_2.3", "product_id": "CSAFPID-9913205", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debuginfo@1.0.9-6.el9_2.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_4.3", "product": { "name": "vers:rpm/1.0.9-6.el9_4.3", "product_id": "CSAFPID-9913125", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debuginfo@1.0.9-6.el9_4.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-7.el9_6.3", "product": { "name": "vers:rpm/1.0.9-7.el9_6.3", "product_id": "CSAFPID-9913196", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debuginfo@1.0.9-7.el9_6.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-6.el10_0.3", "product": { "name": "vers:rpm/1.1.0-6.el10_0.3", "product_id": "CSAFPID-9913140", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debuginfo@1.1.0-6.el10_0.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-8.el10_2.1", "product": { "name": "vers:rpm/1.1.0-8.el10_2.1", "product_id": "CSAFPID-9887140", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debuginfo@1.1.0-8.el10_2.1?arch=x86_64" } } } ], "category": "product_name", "name": "brotli-debuginfo" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_4.1", "product": { "name": "vers:rpm/1.0.6-4.el8_4.1", "product_id": "CSAFPID-9913187", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debugsource@1.0.6-4.el8_4.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_6.1", "product": { "name": "vers:rpm/1.0.6-4.el8_6.1", "product_id": "CSAFPID-9913134", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debugsource@1.0.6-4.el8_6.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_8.1", "product": { "name": "vers:rpm/1.0.6-4.el8_8.1", "product_id": "CSAFPID-9913176", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debugsource@1.0.6-4.el8_8.1?arch=ppc64le" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-5.el8_10", "product": { "name": "vers:rpm/1.0.6-5.el8_10", "product_id": "CSAFPID-9887065", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debugsource@1.0.6-5.el8_10?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-10.el9_8.1", "product": { "name": "vers:rpm/1.0.9-10.el9_8.1", "product_id": "CSAFPID-9887057", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debugsource@1.0.9-10.el9_8.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_2.3", "product": { "name": "vers:rpm/1.0.9-6.el9_2.3", "product_id": "CSAFPID-9913208", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debugsource@1.0.9-6.el9_2.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_4.3", "product": { "name": "vers:rpm/1.0.9-6.el9_4.3", "product_id": "CSAFPID-9913126", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debugsource@1.0.9-6.el9_4.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-7.el9_6.3", "product": { "name": "vers:rpm/1.0.9-7.el9_6.3", "product_id": "CSAFPID-9913197", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debugsource@1.0.9-7.el9_6.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-6.el10_0.3", "product": { "name": "vers:rpm/1.1.0-6.el10_0.3", "product_id": "CSAFPID-9913141", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debugsource@1.1.0-6.el10_0.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-8.el10_2.1", "product": { "name": "vers:rpm/1.1.0-8.el10_2.1", "product_id": "CSAFPID-9887141", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-debugsource@1.1.0-8.el10_2.1?arch=x86_64" } } } ], "category": "product_name", "name": "brotli-debugsource" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_4.1", "product": { "name": "vers:rpm/1.0.6-4.el8_4.1", "product_id": "CSAFPID-9913188", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-devel@1.0.6-4.el8_4.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_6.1", "product": { "name": "vers:rpm/1.0.6-4.el8_6.1", "product_id": "CSAFPID-9913135", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-devel@1.0.6-4.el8_6.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_8.1", "product": { "name": "vers:rpm/1.0.6-4.el8_8.1", "product_id": "CSAFPID-9913177", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-devel@1.0.6-4.el8_8.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-5.el8_10", "product": { "name": "vers:rpm/1.0.6-5.el8_10", "product_id": "CSAFPID-9887066", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-devel@1.0.6-5.el8_10?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-10.el9_8.1", "product": { "name": "vers:rpm/1.0.9-10.el9_8.1", "product_id": "CSAFPID-9887058", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-devel@1.0.9-10.el9_8.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_2.3", "product": { "name": "vers:rpm/1.0.9-6.el9_2.3", "product_id": "CSAFPID-9913209", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-devel@1.0.9-6.el9_2.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_4.3", "product": { "name": "vers:rpm/1.0.9-6.el9_4.3", "product_id": "CSAFPID-9913127", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-devel@1.0.9-6.el9_4.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-7.el9_6.3", "product": { "name": "vers:rpm/1.0.9-7.el9_6.3", "product_id": "CSAFPID-9913198", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-devel@1.0.9-7.el9_6.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-6.el10_0.3", "product": { "name": "vers:rpm/1.1.0-6.el10_0.3", "product_id": "CSAFPID-9913142", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-devel@1.1.0-6.el10_0.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-8.el10_2.1", "product": { "name": "vers:rpm/1.1.0-8.el10_2.1", "product_id": "CSAFPID-9887142", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-devel@1.1.0-8.el10_2.1?arch=x86_64" } } } ], "category": "product_name", "name": "brotli-devel" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.0.9-10.el9_8.1", "product": { "name": "vers:rpm/1.0.9-10.el9_8.1", "product_id": "CSAFPID-9887063", "product_identification_helper": { "purl": "pkg:rpm/redhat/libbrotli@1.0.9-10.el9_8.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_2.3", "product": { "name": "vers:rpm/1.0.9-6.el9_2.3", "product_id": "CSAFPID-9913224", "product_identification_helper": { "purl": "pkg:rpm/redhat/libbrotli@1.0.9-6.el9_2.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_4.3", "product": { "name": "vers:rpm/1.0.9-6.el9_4.3", "product_id": "CSAFPID-9913132", "product_identification_helper": { "purl": "pkg:rpm/redhat/libbrotli@1.0.9-6.el9_4.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-7.el9_6.3", "product": { "name": "vers:rpm/1.0.9-7.el9_6.3", "product_id": "CSAFPID-9913203", "product_identification_helper": { "purl": "pkg:rpm/redhat/libbrotli@1.0.9-7.el9_6.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-6.el10_0.3", "product": { "name": "vers:rpm/1.1.0-6.el10_0.3", "product_id": "CSAFPID-9913147", "product_identification_helper": { "purl": "pkg:rpm/redhat/libbrotli@1.1.0-6.el10_0.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-8.el10_2.1", "product": { "name": "vers:rpm/1.1.0-8.el10_2.1", "product_id": "CSAFPID-9887147", "product_identification_helper": { "purl": "pkg:rpm/redhat/libbrotli@1.1.0-8.el10_2.1?arch=x86_64" } } } ], "category": "product_name", "name": "libbrotli" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.0.9-10.el9_8.1", "product": { "name": "vers:rpm/1.0.9-10.el9_8.1", "product_id": "CSAFPID-9887059", "product_identification_helper": { "purl": "pkg:rpm/redhat/libbrotli-debuginfo@1.0.9-10.el9_8.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_2.3", "product": { "name": "vers:rpm/1.0.9-6.el9_2.3", "product_id": "CSAFPID-9913212", "product_identification_helper": { "purl": "pkg:rpm/redhat/libbrotli-debuginfo@1.0.9-6.el9_2.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_4.3", "product": { "name": "vers:rpm/1.0.9-6.el9_4.3", "product_id": "CSAFPID-9913128", "product_identification_helper": { "purl": "pkg:rpm/redhat/libbrotli-debuginfo@1.0.9-6.el9_4.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-7.el9_6.3", "product": { "name": "vers:rpm/1.0.9-7.el9_6.3", "product_id": "CSAFPID-9913199", "product_identification_helper": { "purl": "pkg:rpm/redhat/libbrotli-debuginfo@1.0.9-7.el9_6.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-6.el10_0.3", "product": { "name": "vers:rpm/1.1.0-6.el10_0.3", "product_id": "CSAFPID-9913143", "product_identification_helper": { "purl": "pkg:rpm/redhat/libbrotli-debuginfo@1.1.0-6.el10_0.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-8.el10_2.1", "product": { "name": "vers:rpm/1.1.0-8.el10_2.1", "product_id": "CSAFPID-9887143", "product_identification_helper": { "purl": "pkg:rpm/redhat/libbrotli-debuginfo@1.1.0-8.el10_2.1?arch=x86_64" } } } ], "category": "product_name", "name": "libbrotli-debuginfo" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_4.1", "product": { "name": "vers:rpm/1.0.6-4.el8_4.1", "product_id": "CSAFPID-9913189", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli@1.0.6-4.el8_4.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_6.1", "product": { "name": "vers:rpm/1.0.6-4.el8_6.1", "product_id": "CSAFPID-9913136", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli@1.0.6-4.el8_6.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_8.1", "product": { "name": "vers:rpm/1.0.6-4.el8_8.1", "product_id": "CSAFPID-9913179", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli@1.0.6-4.el8_8.1?arch=ppc64le" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-5.el8_10", "product": { "name": "vers:rpm/1.0.6-5.el8_10", "product_id": "CSAFPID-9887067", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli@1.0.6-5.el8_10?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-10.el9_8.1", "product": { "name": "vers:rpm/1.0.9-10.el9_8.1", "product_id": "CSAFPID-9887060", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli@1.0.9-10.el9_8.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_2.3", "product": { "name": "vers:rpm/1.0.9-6.el9_2.3", "product_id": "CSAFPID-9913215", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli@1.0.9-6.el9_2.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_4.3", "product": { "name": "vers:rpm/1.0.9-6.el9_4.3", "product_id": "CSAFPID-9913129", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli@1.0.9-6.el9_4.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-7.el9_6.3", "product": { "name": "vers:rpm/1.0.9-7.el9_6.3", "product_id": "CSAFPID-9913200", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli@1.0.9-7.el9_6.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-6.el10_0.3", "product": { "name": "vers:rpm/1.1.0-6.el10_0.3", "product_id": "CSAFPID-9913144", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli@1.1.0-6.el10_0.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-8.el10_2.1", "product": { "name": "vers:rpm/1.1.0-8.el10_2.1", "product_id": "CSAFPID-9887144", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli@1.1.0-8.el10_2.1?arch=x86_64" } } } ], "category": "product_name", "name": "python3-brotli" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_4.1", "product": { "name": "vers:rpm/1.0.6-4.el8_4.1", "product_id": "CSAFPID-9913190", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli-debuginfo@1.0.6-4.el8_4.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_6.1", "product": { "name": "vers:rpm/1.0.6-4.el8_6.1", "product_id": "CSAFPID-9913137", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli-debuginfo@1.0.6-4.el8_6.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-4.el8_8.1", "product": { "name": "vers:rpm/1.0.6-4.el8_8.1", "product_id": "CSAFPID-9913182", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli-debuginfo@1.0.6-4.el8_8.1?arch=ppc64le" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.6-5.el8_10", "product": { "name": "vers:rpm/1.0.6-5.el8_10", "product_id": "CSAFPID-9887068", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli-debuginfo@1.0.6-5.el8_10?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-10.el9_8.1", "product": { "name": "vers:rpm/1.0.9-10.el9_8.1", "product_id": "CSAFPID-9887061", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli-debuginfo@1.0.9-10.el9_8.1?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_2.3", "product": { "name": "vers:rpm/1.0.9-6.el9_2.3", "product_id": "CSAFPID-9913218", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli-debuginfo@1.0.9-6.el9_2.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-6.el9_4.3", "product": { "name": "vers:rpm/1.0.9-6.el9_4.3", "product_id": "CSAFPID-9913130", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli-debuginfo@1.0.9-6.el9_4.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.0.9-7.el9_6.3", "product": { "name": "vers:rpm/1.0.9-7.el9_6.3", "product_id": "CSAFPID-9913201", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli-debuginfo@1.0.9-7.el9_6.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-6.el10_0.3", "product": { "name": "vers:rpm/1.1.0-6.el10_0.3", "product_id": "CSAFPID-9913145", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli-debuginfo@1.1.0-6.el10_0.3?arch=x86_64" } } }, { "category": "product_version_range", "name": "vers:rpm/1.1.0-8.el10_2.1", "product": { "name": "vers:rpm/1.1.0-8.el10_2.1", "product_id": "CSAFPID-9887145", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli-debuginfo@1.1.0-8.el10_2.1?arch=x86_64" } } } ], "category": "product_name", "name": "python3-brotli-debuginfo" } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-6014972", "product_identification_helper": { "cpe": "cpe:/a:redhat:hummingbird:1" } } } ], "category": "product_name", "name": "Red Hat Hardened Images" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-1439326", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_core_services:1" } } } ], "category": "product_name", "name": "Red Hat JBoss Core Services" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1439279", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_ai" } } } ], "category": "product_name", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-1439328", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4" } } } ], "category": "product_name", "name": "Red Hat OpenShift Container Platform 4" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/5", "product": { "name": "vers:rpm/5", "product_id": "CSAFPID-2552051", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_update_service:5" } } } ], "category": "product_name", "name": "Red Hat OpenShift Update Service" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/6", "product": { "name": "vers:rpm/6", "product_id": "CSAFPID-1439313", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6" } } } ], "category": "product_name", "name": "Red Hat Satellite 6" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-2878788", "product_identification_helper": { "cpe": "cpe:/a:redhat:trusted_profile_analyzer:2" } } }, { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-8902834", "product_identification_helper": { "cpe": "cpe:/a:redhat:trusted_profile_analyzer:3" } } } ], "category": "product_name", "name": "Red Hat Trusted Profile Analyzer" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-1771989", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhui:4::el8" } } } ], "category": "product_name", "name": "Red Hat Update Infrastructure 4 for Cloud Providers" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1508264" } } ], "category": "product_name", "name": "automation-controller" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-4534156" } } ], "category": "product_name", "name": "automation-dashboard-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5337949" } } ], "category": "product_name", "name": "controller-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5172458" } } ], "category": "product_name", "name": "controller-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2518221" } } ], "category": "product_name", "name": "ee-supported-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9835428" } } ], "category": "product_name", "name": "python3.11-brotli" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-6017090" } } ], "category": "product_name", "name": "python3.12-brotli" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9835429" } } ], "category": "product_name", "name": "python3x-brotli" } ], "category": "product_family", "name": "Red Hat Ansible Automation Platform 2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9835430" } } ], "category": "product_name", "name": "brotli" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2873478" } } ], "category": "product_name", "name": "firefox" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-7666644" } } ], "category": "product_name", "name": "goose" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2876286" } } ], "category": "product_name", "name": "thunderbird" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5757239" } } ], "category": "product_name", "name": "trustee" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9835432" } } ], "category": "product_name", "name": "brotli" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1459357" } } ], "category": "product_name", "name": "firefox" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2631284" } } ], "category": "product_name", "name": "mozjs60" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1706524" } } ], "category": "product_name", "name": "nodejs" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1459358" } } ], "category": "product_name", "name": "thunderbird" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9835433" } } ], "category": "product_name", "name": "brotli" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1459360" } } ], "category": "product_name", "name": "firefox" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-7666645" } } ], "category": "product_name", "name": "goose" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2631288" } } ], "category": "product_name", "name": "keylime-agent-rust" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2652741" } } ], "category": "product_name", "name": "nodejs" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1459361" } } ], "category": "product_name", "name": "thunderbird" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.2.1-0.1.hum1", "product": { "name": "vers:rpm/1.2.1-0.1.hum1", "product_id": "CSAFPID-9860060", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli@1.2.1-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms" } } } ], "category": "product_name", "name": "brotli" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.2.1-0.1.hum1", "product": { "name": "vers:rpm/1.2.1-0.1.hum1", "product_id": "CSAFPID-9860061", "product_identification_helper": { "purl": "pkg:rpm/redhat/brotli-devel@1.2.1-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms" } } } ], "category": "product_name", "name": "brotli-devel" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9835442" } } ], "category": "product_name", "name": "brotli-main-1.2.1-0.1.hum1" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.2.1-0.1.hum1", "product": { "name": "vers:rpm/1.2.1-0.1.hum1", "product_id": "CSAFPID-9860062", "product_identification_helper": { "purl": "pkg:rpm/redhat/libbrotli@1.2.1-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms" } } } ], "category": "product_name", "name": "libbrotli" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.2.1-0.1.hum1", "product": { "name": "vers:rpm/1.2.1-0.1.hum1", "product_id": "CSAFPID-9860063", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-brotli@1.2.1-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms" } } } ], "category": "product_name", "name": "python3-brotli" } ], "category": "product_family", "name": "Red Hat Hardened Images" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1459356" } } ], "category": "product_name", "name": "firefox" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 7" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222846" } } ], "category": "product_name", "name": "iop-advisor-frontend-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276237" } } ], "category": "product_name", "name": "iop-vulnerability-engine-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222851" } } ], "category": "product_name", "name": "iop-vulnerability-frontend-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9835436" } } ], "category": "product_name", "name": "python-brotli" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9835435" } } ], "category": "product_name", "name": "python3.12-brotli" } ], "category": "product_family", "name": "Red Hat Satellite 6" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9555827" } } ], "category": "product_name", "name": "istio-proxy" } ], "category": "product_family", "name": "OpenShift Service Mesh 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9835434" } } ], "category": "product_name", "name": "jbcs-httpd24-brotli" } ], "category": "product_family", "name": "Red Hat JBoss Core Services" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5008759" } } ], "category": "product_name", "name": "limitador-rhel9" } ], "category": "product_family", "name": "Red Hat Connectivity Link 1" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9375621" } } ], "category": "product_name", "name": "odh-mlserver-cuda-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5826733" } } ], "category": "product_name", "name": "odh-mlserver-rhel9" } ], "category": "product_family", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5351993" } } ], "category": "product_name", "name": "openshift-update-service-rhel8" } ], "category": "product_family", "name": "Red Hat OpenShift Update Service" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9053224" } } ], "category": "product_name", "name": "ose-rhel-coreos" } ], "category": "product_family", "name": "Red Hat OpenShift Container Platform 4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9835439" } } ], "category": "product_name", "name": "python-brotli" } ], "category": "product_family", "name": "Red Hat Update Infrastructure 4 for Cloud Providers" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8902835" } } ], "category": "product_name", "name": "rhtpa-rhel10" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832822" } } ], "category": "product_name", "name": "rhtpa-trustification-service-rhel9" } ], "category": "product_family", "name": "Red Hat Trusted Profile Analyzer" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5586119" } } ], "category": "product_name", "name": "rust" } ], "category": "product_family", "name": "Red Hat Enterprise Linux AI (RHEL AI) 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2905028" } } ], "category": "product_name", "name": "trustee-rhel9" } ], "category": "product_family", "name": "Confidential Compute Attestation" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3010674" } } ], "category": "product_name", "name": "vector-rhel9" } ], "category": "product_family", "name": "Logging Subsystem for Red Hat OpenShift" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-6982271" } } ], "category": "product_name", "name": "vulnerability-analysis-rhel9" } ], "category": "product_family", "name": "Exploit Intelligence" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1295663", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "product_name", "name": "Debian Linux" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/1.0.9-2+deb12u1", "product": { "name": "vers:deb/1.0.9-2+deb12u1", "product_id": "CSAFPID-9859514", "product_identification_helper": { "purl": "pkg:deb/debian/brotli@1.0.9-2+deb12u1?distro=bookworm" } } } ], "category": "product_name", "name": "brotli" }, { "branches": [ { "category": "product_version_range", "name": "vers:deb/unknown", "product": { "name": "vers:deb/unknown", "product_id": "CSAFPID-1408881" } } ], "category": "product_name", "name": "nodejs" } ], "category": "product_family", "name": "bookworm" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/12.0", "product": { "name": "vers:unknown/12.0", "product_id": "CSAFPID-2008992", "product_identification_helper": { "cpe": "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "debian_linux" } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<=2.0.0", "product": { "name": "vers:unknown/<=2.0.0", "product_id": "CSAFPID-9910940", "product_identification_helper": { "cpe": "cpe:2.3:a:duckdb:duckdb:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "DuckDB" } ], "category": "vendor", "name": "DuckDB" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<1.37.8", "product": { "name": "vers:unknown/<1.37.8", "product_id": "CSAFPID-9910935", "product_identification_helper": { "cpe": "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=1.38.0|<1.38.6", "product": { "name": "vers:unknown/>=1.38.0|<1.38.6", "product_id": "CSAFPID-9910936", "product_identification_helper": { "cpe": "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=1.39.0|<1.39.3", "product": { "name": "vers:unknown/>=1.39.0|<1.39.3", "product_id": "CSAFPID-9910937", "product_identification_helper": { "cpe": "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Envoy" } ], "category": "vendor", "name": "Envoy Proxy" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317178", "product_identification_helper": { "cpe": "cpe:/o:fedoraproject:fedora:-" } } } ], "category": "product_name", "name": "Fedora Linux" } ], "category": "vendor", "name": "Fedora" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<1.29.9", "product": { "name": "vers:unknown/<1.29.9", "product_id": "CSAFPID-9910931", "product_identification_helper": { "cpe": "cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=1.30.0|<1.30.6", "product": { "name": "vers:unknown/>=1.30.0|<1.30.6", "product_id": "CSAFPID-9910932", "product_identification_helper": { "cpe": "cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=1.31.0|<1.31.2", "product": { "name": "vers:unknown/>=1.31.0|<1.31.2", "product_id": "CSAFPID-9910933", "product_identification_helper": { "cpe": "cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Istio" } ], "category": "vendor", "name": "Istio" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/11.0.33.0.2", "product": { "name": "vers:unknown/11.0.33.0.2", "product_id": "CSAFPID-9858016", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:11.0.33.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/17.0.21.0.2", "product": { "name": "vers:unknown/17.0.21.0.2", "product_id": "CSAFPID-9858025", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:17.0.21.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/21.0.13.0.2", "product": { "name": "vers:unknown/21.0.13.0.2", "product_id": "CSAFPID-9858021", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:21.0.13.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/25.0.5.0.2", "product": { "name": "vers:unknown/25.0.5.0.2", "product_id": "CSAFPID-9858024", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:25.0.5.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/27.0.1.0.2", "product": { "name": "vers:unknown/27.0.1.0.2", "product_id": "CSAFPID-9858023", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:27.0.1.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/8u511-b32", "product": { "name": "vers:unknown/8u511-b32", "product_id": "CSAFPID-9858022", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:8u511-b32" } } }, { "category": "product_version_range", "name": "vers:unknown/8u511-perf-b32", "product": { "name": "vers:unknown/8u511-perf-b32", "product_id": "CSAFPID-9858020", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:8u511-perf-b32" } } }, { "category": "product_version_range", "name": "vers:unknown/oracle graalvm enterprise edition 21.3.20.0.2", "product": { "name": "vers:unknown/oracle graalvm enterprise edition 21.3.20.0.2", "product_id": "CSAFPID-9858019", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:oracle_graalvm_enterprise_edition_21.3.20.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/oracle graalvm for jdk 17.0.21.0.2", "product": { "name": "vers:unknown/oracle graalvm for jdk 17.0.21.0.2", "product_id": "CSAFPID-9858017", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:oracle_graalvm_for_jdk_17.0.21.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/oracle graalvm for jdk 21.0.13.0.2", "product": { "name": "vers:unknown/oracle graalvm for jdk 21.0.13.0.2", "product_id": "CSAFPID-9858018", "product_identification_helper": { "cpe": "cpe:/a:oracle:java_se:oracle_graalvm_for_jdk_21.0.13.0.2" } } } ], "category": "product_name", "name": "Java Se" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317177", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "product_name", "name": "Oracle Linux" } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<22.23.4", "product": { "name": "vers:unknown/<22.23.4", "product_id": "CSAFPID-9857552" } }, { "category": "product_version_range", "name": "vers:unknown/<24.22.1", "product": { "name": "vers:unknown/<24.22.1", "product_id": "CSAFPID-9857551" } }, { "category": "product_version_range", "name": "vers:unknown/<26.12.1", "product": { "name": "vers:unknown/<26.12.1", "product_id": "CSAFPID-9857553" } } ], "category": "product_name", "name": "Node.js" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1363449", "product_identification_helper": { "cpe": "cpe:/a:oracle:openjdk:-" } } } ], "category": "product_name", "name": "Open Source OpenJDK" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:node/22.23.4", "product": { "name": "vers:node/22.23.4", "product_id": "CSAFPID-9863623" } }, { "category": "product_version_range", "name": "vers:node/24.22.1", "product": { "name": "vers:node/24.22.1", "product_id": "CSAFPID-9863624" } }, { "category": "product_version_range", "name": "vers:node/26.12.1", "product": { "name": "vers:node/26.12.1", "product_id": "CSAFPID-9863625" } }, { "category": "product_version_range", "name": "vers:node/>=22.0.0|<22.23.4", "product": { "name": "vers:node/>=22.0.0|<22.23.4", "product_id": "CSAFPID-9863620" } }, { "category": "product_version_range", "name": "vers:node/>=24.0.0|<24.22.1", "product": { "name": "vers:node/>=24.0.0|<24.22.1", "product_id": "CSAFPID-9863621" } }, { "category": "product_version_range", "name": "vers:node/>=26.0.0|<26.12.1", "product": { "name": "vers:node/>=26.0.0|<26.12.1", "product_id": "CSAFPID-9863622" } } ], "category": "product_name", "name": "Node.js" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<22.23.4", "product": { "name": "vers:unknown/<22.23.4", "product_id": "CSAFPID-9910923", "product_identification_helper": { "cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=23.0.0|<24.22.1", "product": { "name": "vers:unknown/>=23.0.0|<24.22.1", "product_id": "CSAFPID-9910924", "product_identification_helper": { "cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=25.0.0|<26.12.1", "product": { "name": "vers:unknown/>=25.0.0|<26.12.1", "product_id": "CSAFPID-9910925", "product_identification_helper": { "cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*" } } } ], "category": "product_name", "name": "node.js" } ], "category": "vendor", "name": "nodejs" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:paloalto/11.2.10-h17", "product": { "name": "vers:paloalto/11.2.10-h17", "product_id": "CSAFPID-9863493" } }, { "category": "product_version_range", "name": "vers:paloalto/11.2.13-h4", "product": { "name": "vers:paloalto/11.2.13-h4", "product_id": "CSAFPID-9849167" } }, { "category": "product_version_range", "name": "vers:paloalto/11.2.16-h1", "product": { "name": "vers:paloalto/11.2.16-h1", "product_id": "CSAFPID-9849168" } }, { "category": "product_version_range", "name": "vers:paloalto/11.2.4-h23", "product": { "name": "vers:paloalto/11.2.4-h23", "product_id": "CSAFPID-9849164" } }, { "category": "product_version_range", "name": "vers:paloalto/11.2.7-h23", "product": { "name": "vers:paloalto/11.2.7-h23", "product_id": "CSAFPID-9849165" } }, { "category": "product_version_range", "name": "vers:paloalto/12.1.10-h3", "product": { "name": "vers:paloalto/12.1.10-h3", "product_id": "CSAFPID-9849162" } }, { "category": "product_version_range", "name": "vers:paloalto/12.1.4-h13", "product": { "name": "vers:paloalto/12.1.4-h13", "product_id": "CSAFPID-9849160" } }, { "category": "product_version_range", "name": "vers:paloalto/12.1.7-h11", "product": { "name": "vers:paloalto/12.1.7-h11", "product_id": "CSAFPID-9849161" } }, { "category": "product_version_range", "name": "vers:paloalto/12.2.4-h1", "product": { "name": "vers:paloalto/12.2.4-h1", "product_id": "CSAFPID-9849158" } }, { "category": "product_version_range", "name": "vers:paloalto/>=11.2|<11.2.4-h23", "product": { "name": "vers:paloalto/>=11.2|<11.2.4-h23", "product_id": "CSAFPID-9863492" } }, { "category": "product_version_range", "name": "vers:paloalto/>=12.1|<12.1.4-h13", "product": { "name": "vers:paloalto/>=12.1|<12.1.4-h13", "product_id": "CSAFPID-9863491" } }, { "category": "product_version_range", "name": "vers:paloalto/>=12.2|<12.2.4-h1", "product": { "name": "vers:paloalto/>=12.2|<12.2.4-h1", "product_id": "CSAFPID-9863490" } }, { "category": "product_version_range", "name": "vers:unknown/<11.2.10-h17", "product": { "name": "vers:unknown/<11.2.10-h17", "product_id": "CSAFPID-9901055" } }, { "category": "product_version_range", "name": "vers:unknown/<11.2.13-h4", "product": { "name": "vers:unknown/<11.2.13-h4", "product_id": "CSAFPID-9901050" } }, { "category": "product_version_range", "name": "vers:unknown/<11.2.16-h1", "product": { "name": "vers:unknown/<11.2.16-h1", "product_id": "CSAFPID-9901051" } }, { "category": "product_version_range", "name": "vers:unknown/<11.2.4-h23", "product": { "name": "vers:unknown/<11.2.4-h23", "product_id": "CSAFPID-9901053" } }, { "category": "product_version_range", "name": "vers:unknown/<11.2.7-h23", "product": { "name": "vers:unknown/<11.2.7-h23", "product_id": "CSAFPID-9901054" } }, { "category": "product_version_range", "name": "vers:unknown/<12.1.10-h3", "product": { "name": "vers:unknown/<12.1.10-h3", "product_id": "CSAFPID-9901049" } }, { "category": "product_version_range", "name": "vers:unknown/<12.1.4-h13", "product": { "name": "vers:unknown/<12.1.4-h13", "product_id": "CSAFPID-9901047" } }, { "category": "product_version_range", "name": "vers:unknown/<12.1.7-h11", "product": { "name": "vers:unknown/<12.1.7-h11", "product_id": "CSAFPID-9901048" } }, { "category": "product_version_range", "name": "vers:unknown/<12.2.4-h1", "product": { "name": "vers:unknown/<12.2.4-h1", "product_id": "CSAFPID-9901046" } } ], "category": "product_name", "name": "PAN-OS" }, { "branches": [ { "category": "product_version_range", "name": "vers:paloalto/*", "product": { "name": "vers:paloalto/*", "product_id": "CSAFPID-9863495" } } ], "category": "product_name", "name": "PAN-OS 10.2" }, { "branches": [ { "category": "product_version_range", "name": "vers:paloalto/*", "product": { "name": "vers:paloalto/*", "product_id": "CSAFPID-9863494" } } ], "category": "product_name", "name": "PAN-OS 11.1" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/application security transporter client <0.2.9", "product": { "name": "vers:unknown/application security transporter client <0.2.9", "product_id": "CSAFPID-9901052" } } ], "category": "product_name", "name": "Prisma Cloud" } ], "category": "vendor", "name": "Palo Alto Networks" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1330299", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "product_name", "name": "Ubuntu Linux" } ], "category": "vendor", "name": "Ubuntu" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/27.0.0-dev", "product": { "name": "vers:unknown/27.0.0-dev", "product_id": "CSAFPID-9910943", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:arrow:27.0.0:dev:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/<=26.0.0", "product": { "name": "vers:unknown/<=26.0.0", "product_id": "CSAFPID-9910942", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:arrow:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "arrow" } ], "category": "vendor", "name": "Apache" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<1.1.1-r0", "product": { "name": "vers:unknown/>=0|<1.1.1-r0", "product_id": "CSAFPID-9848566" } } ], "category": "product_name", "name": "brotli" } ], "category": "product_family", "name": "Alpine:v3.21" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<1.2.1-r0", "product": { "name": "vers:unknown/>=0|<1.2.1-r0", "product_id": "CSAFPID-9848567" } } ], "category": "product_name", "name": "brotli" } ], "category": "product_family", "name": "Alpine:v3.23" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<1.2.1-r0", "product": { "name": "vers:unknown/>=0|<1.2.1-r0", "product_id": "CSAFPID-9848568" } } ], "category": "product_name", "name": "brotli" } ], "category": "product_family", "name": "Alpine:v3.24" } ], "category": "vendor", "name": "Alpine" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<1.2.7", "product": { "name": "vers:unknown/<1.2.7", "product_id": "CSAFPID-9910946", "product_identification_helper": { "cpe": "cpe:2.3:a:andybalholm:brotli:*:*:*:*:*:go:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/dev/null", "product": { "name": "vers:unknown/dev/null", "product_id": "CSAFPID-9907794" } }, { "category": "product_version_range", "name": "vers:unknown/go/brotli/v1.1.1-rc0", "product": { "name": "vers:unknown/go/brotli/v1.1.1-rc0", "product_id": "CSAFPID-9907795" } }, { "category": "product_version_range", "name": "vers:unknown/go/cbrotli/v1.1.0", "product": { "name": "vers:unknown/go/cbrotli/v1.1.0", "product_id": "CSAFPID-9907796" } }, { "category": "product_version_range", "name": "vers:unknown/go/cbrotli/v1.1.0.bcr.0", "product": { "name": "vers:unknown/go/cbrotli/v1.1.0.bcr.0", "product_id": "CSAFPID-9907797" } }, { "category": "product_version_range", "name": "vers:unknown/go/cbrotli/v1.1.0.bcr.1", "product": { "name": "vers:unknown/go/cbrotli/v1.1.0.bcr.1", "product_id": "CSAFPID-9907798" } }, { "category": "product_version_range", "name": "vers:unknown/go/cbrotli/v1.1.1-rc0", "product": { "name": "vers:unknown/go/cbrotli/v1.1.1-rc0", "product_id": "CSAFPID-9907799" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.3", "product": { "name": "vers:unknown/v1.0.3", "product_id": "CSAFPID-9907800" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.4", "product": { "name": "vers:unknown/v1.0.4", "product_id": "CSAFPID-9907801" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.5", "product": { "name": "vers:unknown/v1.0.5", "product_id": "CSAFPID-9907802" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.6", "product": { "name": "vers:unknown/v1.0.6", "product_id": "CSAFPID-9907803" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.7", "product": { "name": "vers:unknown/v1.0.7", "product_id": "CSAFPID-9907804" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.8", "product": { "name": "vers:unknown/v1.0.8", "product_id": "CSAFPID-9907805" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.9", "product": { "name": "vers:unknown/v1.0.9", "product_id": "CSAFPID-9907806" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.0", "product": { "name": "vers:unknown/v1.1.0", "product_id": "CSAFPID-9907807" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.0rc", "product": { "name": "vers:unknown/v1.1.0rc", "product_id": "CSAFPID-9907808" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.0", "product": { "name": "vers:unknown/v1.2.0", "product_id": "CSAFPID-9907809" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.0rc1", "product": { "name": "vers:unknown/v1.2.0rc1", "product_id": "CSAFPID-9907810" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.0rc2", "product": { "name": "vers:unknown/v1.2.0rc2", "product_id": "CSAFPID-9907811" } } ], "category": "product_name", "name": "brotli" } ], "category": "vendor", "name": "andybalholm" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/1.0.9.0", "product": { "name": "vers:unknown/1.0.9.0", "product_id": "CSAFPID-9853729", "product_identification_helper": { "purl": "pkg:pypi/brotlicffi@1.0.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.9.1", "product": { "name": "vers:unknown/1.0.9.1", "product_id": "CSAFPID-9853730", "product_identification_helper": { "purl": "pkg:pypi/brotlicffi@1.0.9.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.9.2", "product": { "name": "vers:unknown/1.0.9.2", "product_id": "CSAFPID-9853731", "product_identification_helper": { "purl": "pkg:pypi/brotlicffi@1.0.9.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.0.0", "product": { "name": "vers:unknown/1.1.0.0", "product_id": "CSAFPID-9853732", "product_identification_helper": { "purl": "pkg:pypi/brotlicffi@1.1.0.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0.0", "product": { "name": "vers:unknown/1.2.0.0", "product_id": "CSAFPID-9853733", "product_identification_helper": { "purl": "pkg:pypi/brotlicffi@1.2.0.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0.1", "product": { "name": "vers:unknown/1.2.0.1", "product_id": "CSAFPID-9853734", "product_identification_helper": { "purl": "pkg:pypi/brotlicffi@1.2.0.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0.2", "product": { "name": "vers:unknown/1.2.0.2", "product_id": "CSAFPID-9853735", "product_identification_helper": { "purl": "pkg:pypi/brotlicffi@1.2.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/>=1.0.3|<1.2.1.0", "product": { "name": "vers:unknown/>=1.0.3|<1.2.1.0", "product_id": "CSAFPID-9853736" } } ], "category": "product_name", "name": "brotlicffi" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-9910939", "product_identification_helper": { "cpe": "cpe:2.3:a:google:woff2:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "woff2" } ], "category": "vendor", "name": "google" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<1.2.1.0", "product": { "name": "vers:unknown/<1.2.1.0", "product_id": "CSAFPID-9910926", "product_identification_helper": { "cpe": "cpe:2.3:a:python-hyper:brotlicffi:*:*:*:*:*:python:*:*" } } } ], "category": "product_name", "name": "brotlicffi" } ], "category": "vendor", "name": "python-hyper" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<1.4.4", "product": { "name": "vers:unknown/<1.4.4", "product_id": "CSAFPID-9910934", "product_identification_helper": { "cpe": "cpe:2.3:a:anthropic:bun:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "bun" } ], "category": "vendor", "name": "anthropic" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<=202608", "product": { "name": "vers:unknown/<=202608", "product_id": "CSAFPID-9910938", "product_identification_helper": { "cpe": "cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "edk2" } ], "category": "vendor", "name": "tianocore" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<22.23.4", "product": { "name": "vers:unknown/>=0|<22.23.4", "product_id": "CSAFPID-9834981" } }, { "category": "product_version_range", "name": "vers:unknown/>=23.0.0|<24.22.1", "product": { "name": "vers:unknown/>=23.0.0|<24.22.1", "product_id": "CSAFPID-9834982" } }, { "category": "product_version_range", "name": "vers:unknown/>=26.0.0|<26.12.1", "product": { "name": "vers:unknown/>=26.0.0|<26.12.1", "product_id": "CSAFPID-9834983" } } ], "category": "product_name", "name": "node" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<22.23.4", "product": { "name": "vers:unknown/>=0|<22.23.4", "product_id": "CSAFPID-9845535" } }, { "category": "product_version_range", "name": "vers:unknown/>=23.0.0|<24.22.1", "product": { "name": "vers:unknown/>=23.0.0|<24.22.1", "product_id": "CSAFPID-9845536" } }, { "category": "product_version_range", "name": "vers:unknown/>=26.0.0|<26.12.1", "product": { "name": "vers:unknown/>=26.0.0|<26.12.1", "product_id": "CSAFPID-9845537" } } ], "category": "product_name", "name": "node-min" } ], "category": "vendor", "name": "Bitnami" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<=16.02", "product": { "name": "vers:unknown/<=16.02", "product_id": "CSAFPID-9910945", "product_identification_helper": { "cpe": "cpe:2.3:a:7-zip:p7zip:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "p7zip" } ], "category": "vendor", "name": "7-Zip" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-111497", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "A flaw in Node.js can cause Node.js Brotli decoder out-of-bounds write permits remote code execution. This vulnerability affects Node.js 22.x, 24.x, and 26.x.", "title": "osvbitnami - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Bitnami%2FBIT-node-2026-111497.json?alt=media" }, { "category": "description", "text": "A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.\nThis issue is rated Important. Exploitation requires that the target decompress attacker-controlled Brotli data (for example HTTP content negotiated with Content-Encoding: br, or APIs such as Node.js zlib / fetch() that decode Brotli). The vulnerable path is reached with a malformed stream rather than typical well-formed encoder output, and there is no public, reliable remote code execution proof-of-concept. Red Hat Enterprise Linux compiler and runtime hardenings — including Address Space Layout Randomization (ASLR), Non-eXecutable (NX) memory, FORTIFY_SOURCE, and SELinux — increase the difficulty of turning this memory corruption into reliable code execution, though they do not eliminate crashes or all impact. Combined with the Attack Requirements noted by the CNA (CVSS v4 AT:P), Red Hat scores Attack Complexity as High and rates the flaw Important rather than Critical.", "title": "redhat - https://access.redhat.com/security/cve/CVE-2026-111497" }, { "category": "description", "text": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.", "title": "osvgit - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-111497.json?alt=media" }, { "category": "description", "text": "A flaw in Node.js can cause Node.js Brotli decoder out-of-bounds write permits remote code execution. This vulnerability affects Node.js 22.x, 24.x, and 26.x.", "title": "osvbitnami - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Bitnami%2FBIT-node-min-2026-111497.json?alt=media" }, { "category": "description", "text": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.", "title": "osvpypi - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-9v8h-qqgm-4m35.json?alt=media" }, { "category": "description", "text": "

Out-of-bounds write in .NET allows an unauthorized attacker to elevate privileges over a network.

\n", "title": "microsoft - https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Oct" }, { "category": "description", "text": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-111497" }, { "category": "description", "text": "CVE-2026-111497 (\"Node2Shell\") is an out-of-bounds write (CWE-787) in Google's\nBrotli decoder (c/dec/decode.c). DecodeBlockTypeAndLength() returns an ambiguous\nvalue for an invalid block switch, and the fast decode path discards it\n(CWE-252, unchecked return value), so a crafted Brotli stream makes the decoder\ncontinue on corrupted state and write past the ring buffer. Upstream rates it\nCVSS 4.0 9.2 and classifies the impact as potential remote code execution.\n\nThe vulnerability is in Google's C library, not in Node.js specifically. The\nPyPI `Brotli` package is Google's CPython binding and compiles the same\nc/dec/decode.c that has the actual vulnerability. All `Brotli` releases up to\nand including 1.2.0 ship the vulnerable decoder; 1.2.1 contains the upstream\nfix (commit 0ed4268a) and differs from 1.2.0 only in that fix plus a version\nbump.\n\nThe decoder is reached whenever untrusted Brotli data is decompressed. With\n`Brotli` installed, common HTTP clients decode Brotli responses automatically\n(urllib3/requests, httpx with the brotli extra, aiohttp) and services that\naccept `Content-Encoding: br` request bodies decode inbound data, so the flaw\nis reachable from attacker-controlled input.\n", "title": "osvpypi - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FPYSEC-2026-4322.json?alt=media" }, { "category": "description", "text": "CVE-2026-111497 (\"Node2Shell\") is an out-of-bounds write (CWE-787) in Google's\nBrotli decoder (c/dec/decode.c). DecodeBlockTypeAndLength() returns an ambiguous\nvalue for an invalid block switch, and the fast decode path discards it\n(CWE-252, unchecked return value), so a crafted Brotli stream makes the decoder\ncontinue on corrupted state and write past the ring buffer. Upstream rates it\nCVSS 4.0 9.2 and classifies the impact as potential remote code execution.\n\nThe vulnerability is in Google's C library, not in Node.js specifically. The\nPyPI `Brotli` package is Google's CPython binding and compiles the same\nc/dec/decode.c that has the original vulnerability. All `Brotli` releases up to\nand including 1.2.0 ship the vulnerable decoder; 1.2.1 contains the upstream\nfix (commit 0ed4268a) and differs from 1.2.0 only in that fix plus a version\nbump.\n\nThe decoder is reached whenever untrusted Brotli data is decompressed. With\n`brotlicffi` installed, common HTTP clients decode Brotli responses automatically\n(urllib3/requests, httpx with the brotli extra, aiohttp) and services that\naccept `Content-Encoding: br` request bodies decode inbound data, so the flaw\nis reachable from attacker-controlled input.\n", "title": "osvpypi - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FPYSEC-2026-4323.json?alt=media" }, { "category": "description", "text": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.", "title": "osvalpine - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Alpine%2FALPINE-CVE-2026-111497.json?alt=media" }, { "category": "description", "text": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-111497" }, { "category": "description", "text": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.", "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-111497" }, { "category": "description", "text": "A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:87420" }, { "category": "description", "text": "Google Brotli versions 1.0.3 through 1.2.0 are susceptible to a vulnerability known alternatively as Node2Shell or HTTP2Shell which when successfully exploited could allow malformed compressed input to write past the end of an internal decoder buffer.", "title": "netapp - https://security.netapp.com/advisory/ntap-20261023-0001" }, { "category": "description", "text": "Palo Alto Networks is aware of the vulnerability in Brotli: CVE-2026-111497.\n\nA buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. Brotli is commonly used by many HTTP-based applications including Node.js.\n\nPalo Alto Networks is actively investigating its product portfolio and cloud services to determine potential impact from this vulnerability. The sections below will be updated as our analysis progresses and additional information or remediation status becomes available.", "title": "paloalto - https://security.paloaltonetworks.com/CVE-2026-111497" }, { "category": "description", "text": "Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\nApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "title": "cisagov - https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json" }, { "category": "description", "text": "A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:90888" }, { "category": "description", "text": "A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:90889" }, { "category": "description", "text": "A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:90892" }, { "category": "description", "text": "A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:90914" }, { "category": "description", "text": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.", "title": "euvdkev - https://euvdservices.enisa.europa.eu/api/search?fromScore=0&toScore=10&fromEpss=0&toEpss=100&exploited=true&page=0&size=50" }, { "category": "description", "text": "Node.js as used in SDDC manager contains a remote code-execution vulnerability due to an out-of-bounds write issue in Brotli decoder.", "title": "broadcom - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39445" }, { "category": "description", "text": "CVE-2026-105482 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-105483 - (high)This vulnerability affects Node.js 26.x and 24.x.CVE-2026-106069 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-111497 - (high)A flaw in Node.js can cause Node.js Brotli decoder out-of-bounds write permits remote code execution.This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-105481 - (medium)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-106072 - (medium)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-106074 - (medium)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-106070 - (low)This vulnerability affects Node.js 26.x.CVE-2026-106071 - (low)This vulnerability affects Node.js 26.x.CVE-2026-106073 - (low)This vulnerability affects Node.js 26.x, 24.x, and 22.x.", "title": "fortinet - https://fortiguard.fortinet.com/psirt/FG-IR-26-187" }, { "category": "description", "text": "Node.js Brotli decoder out-of-bounds write permits remote code execution\nA flaw in the Brotli decoder bundled with Node.js allows malformed compressed input to write past the end of an internal decoder buffer.\n\nAn invalid block switch was reported as a temporary need for more input instead of a permanent format error, so the streaming decoder kept appending input bytes to an eight-byte internal buffer. An attacker who can supply Brotli data that an application decompresses with `node:zlib` can corrupt process memory, which can lead to a crash, disclosure of process memory, or remote code execution.\n\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.\n", "title": "nodesecuritywg - https://raw.githubusercontent.com/nodejs/security-wg/main/vuln/core/204.json" }, { "category": "description", "text": "A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:90495" }, { "category": "description", "text": "A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:90501" }, { "category": "description", "text": "A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:90449" }, { "category": "description", "text": "A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:90893" }, { "category": "description", "text": "A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:90891" }, { "category": "description", "text": "A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:90890" }, { "category": "other", "text": "0.87988", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "title": "CVSSV4" }, { "category": "other", "text": "9.2", "title": "CVSSV4 base score" }, { "category": "other", "text": "7.9", "title": "NCSC Score" }, { "category": "other", "text": "The value of the most recent EPSS score, Is related to an uncommon product vendor, Is related to (a version of) an uncommon product, There is news data available from source Bleepingcomputer, There is product data available from a private source, There is cvss data available from a private source, IMPACT as product threat category, VENDOR FIX as product remediation category, There is product data available from source Certbundde", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "Is related to a product by vendor Apache", "title": "NCSC Score top decreasing factors" }, { "category": "details", "text": "Severity: 3\n", "title": "Vendor assessment" }, { "category": "details", "text": "Severity: 4\n", "title": "Vendor assessment" }, { "category": "details", "text": "Severity: 3\n", "title": "Vendor assessment" }, { "category": "details", "text": "Severity: 4\n", "title": "Vendor assessment" } ], "product_status": { "first_fixed": [ "CSAFPID-9859514" ], "fixed": [ "CSAFPID-9860060", "CSAFPID-9860061", "CSAFPID-9860062", "CSAFPID-9860063", "CSAFPID-9863623", "CSAFPID-9863624", "CSAFPID-9863625", "CSAFPID-9887056", "CSAFPID-9887057", "CSAFPID-9887058", "CSAFPID-9887059", "CSAFPID-9887060", "CSAFPID-9887061", "CSAFPID-9887062", "CSAFPID-9887063", "CSAFPID-9887064", "CSAFPID-9887065", "CSAFPID-9887066", "CSAFPID-9887067", "CSAFPID-9887068", "CSAFPID-9887069", "CSAFPID-9887140", "CSAFPID-9887141", "CSAFPID-9887142", "CSAFPID-9887143", "CSAFPID-9887144", "CSAFPID-9887145", "CSAFPID-9887146", "CSAFPID-9887147", "CSAFPID-9913124", "CSAFPID-9913125", "CSAFPID-9913126", "CSAFPID-9913127", "CSAFPID-9913128", "CSAFPID-9913129", "CSAFPID-9913130", "CSAFPID-9913132", "CSAFPID-1442700", "CSAFPID-1485273", "CSAFPID-9913133", "CSAFPID-9913134", "CSAFPID-9913135", "CSAFPID-9913136", "CSAFPID-9913137", "CSAFPID-9913138", "CSAFPID-9913139", "CSAFPID-9913140", "CSAFPID-9913141", "CSAFPID-9913142", "CSAFPID-9913143", "CSAFPID-9913144", "CSAFPID-9913145", "CSAFPID-9913147", "CSAFPID-9913174", "CSAFPID-9913176", "CSAFPID-9913177", "CSAFPID-9913179", "CSAFPID-9913182", "CSAFPID-9913183", "CSAFPID-1442666", "CSAFPID-1695147", "CSAFPID-9913186", "CSAFPID-9913187", "CSAFPID-9913188", "CSAFPID-9913189", "CSAFPID-9913190", "CSAFPID-9913191", "CSAFPID-9913196", "CSAFPID-9913197", "CSAFPID-9913198", "CSAFPID-9913199", "CSAFPID-9913200", "CSAFPID-9913201", "CSAFPID-9913202", "CSAFPID-9913203", "CSAFPID-9913205", "CSAFPID-9913208", "CSAFPID-9913209", "CSAFPID-9913212", "CSAFPID-9913215", "CSAFPID-9913218", "CSAFPID-9913222", "CSAFPID-9913224" ], "known_affected": [ "CSAFPID-1408881", "CSAFPID-9834981", "CSAFPID-9834982", "CSAFPID-9834983", "CSAFPID-1439279", "CSAFPID-1439313", "CSAFPID-1439315", "CSAFPID-1439317", "CSAFPID-1439319", "CSAFPID-1439326", "CSAFPID-1439328", "CSAFPID-1459356", "CSAFPID-1459357", "CSAFPID-1459358", "CSAFPID-1459360", "CSAFPID-1459361", "CSAFPID-1508257", "CSAFPID-1771989", "CSAFPID-2518221", "CSAFPID-2858634", "CSAFPID-2873478", "CSAFPID-2876286", "CSAFPID-2942231", "CSAFPID-5172458", "CSAFPID-5337949", "CSAFPID-5826733", "CSAFPID-6014972", "CSAFPID-6017090", "CSAFPID-6982270", "CSAFPID-6982271", "CSAFPID-9053224", "CSAFPID-9375621", "CSAFPID-9555827", "CSAFPID-9835428", "CSAFPID-9835429", "CSAFPID-9835430", "CSAFPID-9835432", "CSAFPID-9835433", "CSAFPID-9835434", "CSAFPID-9835435", "CSAFPID-9835436", "CSAFPID-9835439", "CSAFPID-9835442", "CSAFPID-5181441", "CSAFPID-5181442", "CSAFPID-5181443", "CSAFPID-5181444", "CSAFPID-5181445", "CSAFPID-5181446", "CSAFPID-4480771", "CSAFPID-4480772", "CSAFPID-4480773", "CSAFPID-4480774", "CSAFPID-4480775", "CSAFPID-4544152", "CSAFPID-5181447", "CSAFPID-4544154", "CSAFPID-5181448", "CSAFPID-9845195", "CSAFPID-5181449", "CSAFPID-5181450", "CSAFPID-9845535", "CSAFPID-9845536", "CSAFPID-9845537", "CSAFPID-9847982", "CSAFPID-9847983", "CSAFPID-9847984", "CSAFPID-9848566", "CSAFPID-9848567", "CSAFPID-9848568", "CSAFPID-618124", "CSAFPID-618123", "CSAFPID-618092", "CSAFPID-5158872", "CSAFPID-5158873", "CSAFPID-5158874", "CSAFPID-5172535", "CSAFPID-9853728", "CSAFPID-9853729", "CSAFPID-9853730", "CSAFPID-9853731", "CSAFPID-9853732", "CSAFPID-9853733", "CSAFPID-9853734", "CSAFPID-9853735", "CSAFPID-9853736", "CSAFPID-1520004", "CSAFPID-2967492", "CSAFPID-5137200", "CSAFPID-6225812", "CSAFPID-9855725", "CSAFPID-9855726", "CSAFPID-9855727", "CSAFPID-9855728", "CSAFPID-9855729", "CSAFPID-9855730", "CSAFPID-9855731", "CSAFPID-9855732", "CSAFPID-9855733", "CSAFPID-9855734", "CSAFPID-9855735", "CSAFPID-9855736", "CSAFPID-9855737", "CSAFPID-9855738", "CSAFPID-9855739", "CSAFPID-1317175", "CSAFPID-9857551", "CSAFPID-9857552", "CSAFPID-9857553", "CSAFPID-9863490", "CSAFPID-9863491", "CSAFPID-9863492", "CSAFPID-9863620", "CSAFPID-9863621", "CSAFPID-9863622", "CSAFPID-9873048", "CSAFPID-9381589", "CSAFPID-9881334", "CSAFPID-1295663", "CSAFPID-1317177", "CSAFPID-1317178", "CSAFPID-1330299", "CSAFPID-1363449", "CSAFPID-9858016", "CSAFPID-9858017", "CSAFPID-9858018", "CSAFPID-9858019", "CSAFPID-9858020", "CSAFPID-9858021", "CSAFPID-9858022", "CSAFPID-9858023", "CSAFPID-9858024", "CSAFPID-9858025", "CSAFPID-9886380", "CSAFPID-9892886", "CSAFPID-2895890", "CSAFPID-9901046", "CSAFPID-9901047", "CSAFPID-9901048", "CSAFPID-9901049", "CSAFPID-9901050", "CSAFPID-9901051", "CSAFPID-9901052", "CSAFPID-9901053", "CSAFPID-9901054", "CSAFPID-9901055", "CSAFPID-9906028", "CSAFPID-9906031", "CSAFPID-9907794", "CSAFPID-9907795", "CSAFPID-9907796", "CSAFPID-9907797", "CSAFPID-9907798", "CSAFPID-9907799", "CSAFPID-9907800", "CSAFPID-9907801", "CSAFPID-9907802", "CSAFPID-9907803", "CSAFPID-9907804", "CSAFPID-9907805", "CSAFPID-9907806", "CSAFPID-9907807", "CSAFPID-9907808", "CSAFPID-9907809", "CSAFPID-9907810", "CSAFPID-9907811", "CSAFPID-2008992", "CSAFPID-9214514", "CSAFPID-9214515", "CSAFPID-9214516", "CSAFPID-9214517", "CSAFPID-9214518", "CSAFPID-9214519", "CSAFPID-9214520", "CSAFPID-9714430", "CSAFPID-9910920", "CSAFPID-9910921", "CSAFPID-9910922", "CSAFPID-9910923", "CSAFPID-9910924", "CSAFPID-9910925", "CSAFPID-9910926", "CSAFPID-9910927", "CSAFPID-9910928", "CSAFPID-9910929", "CSAFPID-9910930", "CSAFPID-9910931", "CSAFPID-9910932", "CSAFPID-9910933", "CSAFPID-9910934", "CSAFPID-9910935", "CSAFPID-9910936", "CSAFPID-9910937", "CSAFPID-9910938", "CSAFPID-9910939", "CSAFPID-9910940", "CSAFPID-9910941", "CSAFPID-9910942", "CSAFPID-9910943", "CSAFPID-9910944", "CSAFPID-9910945", "CSAFPID-9910946", "CSAFPID-5137226" ], "known_not_affected": [ "CSAFPID-1455864", "CSAFPID-1508264", "CSAFPID-1706524", "CSAFPID-1832822", "CSAFPID-2552051", "CSAFPID-2631284", "CSAFPID-2631288", "CSAFPID-2652741", "CSAFPID-2878788", "CSAFPID-2905027", "CSAFPID-2905028", "CSAFPID-2914823", "CSAFPID-3010674", "CSAFPID-4534156", "CSAFPID-5008759", "CSAFPID-5198605", "CSAFPID-5222846", "CSAFPID-5222851", "CSAFPID-5276237", "CSAFPID-5351993", "CSAFPID-5586119", "CSAFPID-5757239", "CSAFPID-7666644", "CSAFPID-7666645", "CSAFPID-8902834", "CSAFPID-8902835", "CSAFPID-9849158", "CSAFPID-9849160", "CSAFPID-9849161", "CSAFPID-9849162", "CSAFPID-9849164", "CSAFPID-9849165", "CSAFPID-9849167", "CSAFPID-9849168", "CSAFPID-9863493", "CSAFPID-9863494", "CSAFPID-9863495" ] }, "references": [ { "category": "external", "summary": "Source - ncscclear", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0453" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-111497" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Bitnami%2FBIT-node-2026-111497.json?alt=media" }, { "category": "external", "summary": "Source - securitynl", "url": "https://www.security.nl/posting/958792/NCSC+adviseert+om+lek+in+Google+Brotli-decoder+meteen+te+patchen?channel=rss" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-111497.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Bitnami%2FBIT-node-min-2026-111497.json?alt=media" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Alpine%2FALPINE-CVE-2026-111497.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FPYSEC-2026-4322.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FPYSEC-2026-4323.json?alt=media" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111497" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-9v8h-qqgm-4m35.json?alt=media" }, { "category": "external", "summary": "Source - netapp", "url": "https://security.netapp.com/advisory/ntap-20261023-0001" }, { "category": "external", "summary": "Source - microsoft", "url": "https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Oct" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4117.json" }, { "category": "external", "summary": "Source - securityweek", "url": "https://www.securityweek.com/node2shell-brotli-flaw-triggers-patching-across-microsoft-node-js-python-packages/" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111497" }, { "category": "external", "summary": "Source - bleepingcomputer", "url": "https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-emergency-net-patches-for-critical-brotli-flaw/" }, { "category": "external", "summary": "Source - bleepingcomputer", "url": "https://www.bleepingcomputer.com/news/security/critical-http2shell-brotli-vulnerability-triggers-emergency-patches/" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:87420" }, { "category": "external", "summary": "Source - paloalto", "url": "https://security.paloaltonetworks.com/CVE-2026-111497" }, { "category": "external", "summary": "Source - nodesecuritywg", "url": "https://raw.githubusercontent.com/nodejs/security-wg/main/vuln/core/204.json" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90501" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90449" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90495" }, { "category": "external", "summary": "Source - cisagov", "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json" }, { "category": "external", "summary": "Source - hkcert", "url": "https://www.hkcert.org/security-bulletin/google-brotli-remote-code-execution-vulnerability_20261028" }, { "category": "external", "summary": "Source - broadcom", "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/39445" }, { "category": "external", "summary": "Source - euvdkev", "url": "https://euvdservices.enisa.europa.eu/api/search?fromScore=0&toScore=10&fromEpss=0&toEpss=100&exploited=true&page=0&size=50" }, { "category": "external", "summary": "Source - securityweek", "url": "https://www.securityweek.com/cisa-warns-of-node2shell-exploitation-as-honeypots-log-attack-attempts/" }, { "category": "external", "summary": "Source - bleepingcomputer", "url": "https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-now-exploiting-critical-node2shell-flaw/" }, { "category": "external", "summary": "Source - securitynl", "url": "https://www.security.nl/posting/959389/Node2Shell-kwetsbaarheid+in+Brotli-decoder+actief+misbruikt+bij+aanvallen?channel=rss" }, { "category": "external", "summary": "Source - fortinet", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-187" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90888" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90889" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90892" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90914" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90893" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90891" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90890" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-111497" }, { "category": "external", "summary": "Source - hkcert", "url": "https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities_20261022" }, { "category": "external", "summary": "Source - debian", "url": "https://security-tracker.debian.org/tracker/CVE-2026-111497" }, { "category": "external", "summary": "News - securityweek", "url": "https://www.securityweek.com/cisa-warns-of-node2shell-exploitation-as-honeypots-log-attack-attempts/" }, { "category": "external", "summary": "News - bleepingcomputer", "url": "https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-now-exploiting-critical-node2shell-flaw/" }, { "category": "external", "summary": "News - securitynl", "url": "https://www.security.nl/posting/959389/Node2Shell-kwetsbaarheid+in+Brotli-decoder+actief+misbruikt+bij+aanvallen?channel=rss" }, { "category": "external", "summary": "News - securitynl", "url": "https://www.security.nl/posting/958792/NCSC+adviseert+om+lek+in+Google+Brotli-decoder+meteen+te+patchen?channel=rss" }, { "category": "external", "summary": "News - securityweek", "url": "https://www.securityweek.com/node2shell-brotli-flaw-triggers-patching-across-microsoft-node-js-python-packages/" }, { "category": "external", "summary": "News - bleepingcomputer", "url": "https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-emergency-net-patches-for-critical-brotli-flaw/" }, { "category": "external", "summary": "News - bleepingcomputer", "url": "https://www.bleepingcomputer.com/news/security/critical-http2shell-brotli-vulnerability-triggers-emergency-patches/" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://security-tracker.debian.org/tracker/CVE-2026-111497" }, { "category": "external", "summary": "Reference - cveprojectv5; euvdkev; nvd; osv; redhat", "url": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high" }, { "category": "external", "summary": "Reference - cisagov; netapp; osv; redhat", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111497" }, { "category": "external", "summary": "Reference - osv; redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-111497" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111497.json" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/advisories/GHSA-9v8h-qqgm-4m35" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/google/brotli/releases/tag/v1.2.1" }, { "category": "external", "summary": "Reference - certbundde; nodesecuritywg; osv", "url": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases" }, { "category": "external", "summary": "Reference - osv", "url": "https://opensourcemalware.com/blog/node2shell-affects-python" }, { "category": "external", "summary": "Reference - osv", "url": "https://security.alpinelinux.org/vuln/CVE-2026-111497" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "http://www.openwall.com/lists/oss-security/2026/10/23/25" }, { "category": "external", "summary": "Reference - certbundde; cveprojectv5; nvd; osv", "url": "https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/google/brotli/commit/50a9b70a4d5e1443fc40927952276b68fffa83a0" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/google/brotli/commit/b418fa81c48262a86a95332b0bc6d62c30aa78b6" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/google/brotli/commit/da9806362874b9bd4b552a3af360b5d6347beb12" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/google/brotli/releases/tag/v1.0.10" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/google/brotli/releases/tag/v1.1.1" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2026-4322.yaml" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/brotlicffi/PYSEC-2026-4323.yaml" }, { "category": "external", "summary": "Reference - osv", "url": "https://pypi.org/project/Brotli" }, { "category": "external", "summary": "Reference - osv", "url": "https://pypi.org/project/brotlicffi" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "http://www.openwall.com/lists/oss-security/2026/10/24/6" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "http://www.openwall.com/lists/oss-security/2026/10/26/12" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "http://www.openwall.com/lists/oss-security/2026/10/26/13" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://broccoli2shell.com/" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/dotnet/announcements/issues/494" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4117.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4117" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://nodejs.org/en/blog/release/v22.23.4" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://nodejs.org/en/blog/release/v24.22.1" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://nodejs.org/en/blog/release/v26.12.1" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.imperva.com/blog/node2shell-from-brotli-data-to-remote-code-execution/" }, { "category": "external", "summary": "Reference - certbundde; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:87420" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://patchtheplanet.org/brotli" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-111497" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2558973" }, { "category": "external", "summary": "Reference - redhat", "url": "https://images.redhat.com/" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/updates/classification/" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_87420.json" }, { "category": "external", "summary": "Reference - nvd; osv", "url": "http://www.openwall.com/lists/oss-security/2026/10/26/16" }, { "category": "external", "summary": "Reference - paloalto", "url": "https://security.paloaltonetworks.com/CVE-2026-xxyyzz" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a336a99528" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://security-tracker.debian.org/tracker/DSA-6582-1" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-5b98dd6d78" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497" }, { "category": "external", "summary": "Reference - certbundde", "url": "http://linux.oracle.com/errata/ELSA-2026-500514.html" }, { "category": "external", "summary": "Reference - certbundde; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90501" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-4aade61415" }, { "category": "external", "summary": "Reference - certbundde", "url": "http://linux.oracle.com/errata/ELSA-2026-500517.html" }, { "category": "external", "summary": "Reference - certbundde; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90495" }, { "category": "external", "summary": "Reference - certbundde", "url": "http://linux.oracle.com/errata/ELSA-2026-500515.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-92436bef9c" }, { "category": "external", "summary": "Reference - certbundde", "url": "http://linux.oracle.com/errata/ELSA-2026-500516.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://ubuntu.com/security/notices/USN-8956-1" }, { "category": "external", "summary": "Reference - certbundde", "url": "http://linux.oracle.com/errata/ELSA-2026-500513.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "http://linux.oracle.com/errata/ELSA-2026-500512.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-500520.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-500518.html" }, { "category": "external", "summary": "Reference - certbundde; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90449" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-500519.html" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-015" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90495.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90501.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90449.json" }, { "category": "external", "summary": "Reference - euvdkev; nvd; osv", "url": "https://github.com/andybalholm/brotli/releases/tag/v1.2.7" }, { "category": "external", "summary": "Reference - nvd; osv", "url": "https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/" }, { "category": "external", "summary": "Reference - nvd; osv", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497" }, { "category": "external", "summary": "Reference - broadcom", "url": "https://knowledge.broadcom.com/external/article?articleNumber=460732" }, { "category": "external", "summary": "Reference - broadcom", "url": "https://knowledge.broadcom.com/external/article?articleNumber=460734" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://security.paloaltonetworks.com/CVE-2026-111497" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90888" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90888.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90893" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90893.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90889" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90889.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90892" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90892.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90891" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90891.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90914" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90914.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:90890" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90890.json" } ], "remediations": [ { "category": "mitigation", "details": "Limit exposure of services that decompress Brotli from untrusted peers, and restrict network access to those services where practical. Prefer not accepting or auto-decoding Content-Encoding: br from untrusted sources when the application allows that configuration.", "product_ids": [ "CSAFPID-1439279", "CSAFPID-1439313", "CSAFPID-1439315", "CSAFPID-1439317", "CSAFPID-1439319", "CSAFPID-1439326", "CSAFPID-1439328", "CSAFPID-1455864", "CSAFPID-1459356", "CSAFPID-1459357", "CSAFPID-1459358", "CSAFPID-1459360", "CSAFPID-1459361", "CSAFPID-1508257", "CSAFPID-1508264", "CSAFPID-1706524", "CSAFPID-1771989", "CSAFPID-1832822", "CSAFPID-2518221", "CSAFPID-2552051", "CSAFPID-2631284", "CSAFPID-2631288", "CSAFPID-2652741", "CSAFPID-2858634", "CSAFPID-2873478", "CSAFPID-2876286", "CSAFPID-2878788", "CSAFPID-2905027", "CSAFPID-2905028", "CSAFPID-2914823", "CSAFPID-2942231", "CSAFPID-3010674", "CSAFPID-4534156", "CSAFPID-5008759", "CSAFPID-5172458", "CSAFPID-5198605", "CSAFPID-5222846", "CSAFPID-5222851", "CSAFPID-5276237", "CSAFPID-5337949", "CSAFPID-5351993", "CSAFPID-5586119", "CSAFPID-5757239", "CSAFPID-5826733", "CSAFPID-6014972", "CSAFPID-6017090", "CSAFPID-6982270", "CSAFPID-6982271", "CSAFPID-7666644", "CSAFPID-7666645", "CSAFPID-8902834", "CSAFPID-8902835", "CSAFPID-9053224", "CSAFPID-9375621", "CSAFPID-9555827", "CSAFPID-9835428", "CSAFPID-9835429", "CSAFPID-9835430", "CSAFPID-9835432", "CSAFPID-9835433", "CSAFPID-9835434", "CSAFPID-9835435", "CSAFPID-9835436", "CSAFPID-9835439", "CSAFPID-9835442" ] }, { "category": "vendor_fix", "details": "Release Notes", "product_ids": [ "CSAFPID-1520004" ], "url": "https://github.com/PowerShell/PowerShell/releases/tag/v7.4.22" }, { "category": "vendor_fix", "details": "Release Notes", "product_ids": [ "CSAFPID-2967492" ], "url": "https://github.com/PowerShell/PowerShell/releases/tag/v7.5.13" }, { "category": "vendor_fix", "details": "Release Notes", "product_ids": [ "CSAFPID-5137200" ], "url": "https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history" }, { "category": "vendor_fix", "details": "Release Notes", "product_ids": [ "CSAFPID-6225812" ], "url": "https://github.com/PowerShell/PowerShell/releases/tag/v7.6.9" }, { "category": "vendor_fix", "details": "5133966", "product_ids": [ "CSAFPID-9855725", "CSAFPID-9855726", "CSAFPID-9855727" ], "url": "https://dotnet.microsoft.com/download/dotnet/10.0" }, { "category": "vendor_fix", "details": "Release Notes", "product_ids": [ "CSAFPID-9855728", "CSAFPID-9855729", "CSAFPID-9855730" ], "url": "https://dotnet.microsoft.com/download/dotnet/11.0" }, { "category": "vendor_fix", "details": "Release Notes", "product_ids": [ "CSAFPID-9855731" ], "url": "https://learn.microsoft.com/en-us/visualstudio/releases/2019/release-history" }, { "category": "vendor_fix", "details": "Release Notes", "product_ids": [ "CSAFPID-9855732", "CSAFPID-9855733" ], "url": "https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history" }, { "category": "vendor_fix", "details": "5133964", "product_ids": [ "CSAFPID-9855734", "CSAFPID-9855735", "CSAFPID-9855736" ], "url": "https://dotnet.microsoft.com/download/dotnet/8.0" }, { "category": "vendor_fix", "details": "5133965", "product_ids": [ "CSAFPID-9855737", "CSAFPID-9855738", "CSAFPID-9855739" ], "url": "https://dotnet.microsoft.com/download/dotnet/9.0" }, { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/", "product_ids": [ "CSAFPID-9860060", "CSAFPID-9860061", "CSAFPID-9860062", "CSAFPID-9860063" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:87420" }, { "category": "workaround", "details": "Limit exposure of services that decompress Brotli from untrusted peers, and restrict network access to those services where practical (CME-202 host firewall, CME-203 network segmentation). Prefer not accepting or auto-decoding Content-Encoding: br from untrusted sources when the application allows that configuration. Apply updates that include Google Brotli 1.0.10, 1.1.1, or 1.2.1 (or a backport of commit 0ed4268), and Node.js 22.23.4, 24.22.1, or 26.12.1 where Node.js is used.", "product_ids": [ "CSAFPID-9860060", "CSAFPID-9860061", "CSAFPID-9860062", "CSAFPID-9860063" ] }, { "category": "none_available", "details": "No fix or other remediation is available.", "product_ids": [ "CSAFPID-9873048" ] }, { "category": "vendor_fix", "details": "Release Notes", "product_ids": [ "CSAFPID-9381589", "CSAFPID-9881334", "CSAFPID-5137226" ] }, { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-9887056", "CSAFPID-9887057", "CSAFPID-9887058", "CSAFPID-9887059", "CSAFPID-9887060", "CSAFPID-9887061", "CSAFPID-9887062", "CSAFPID-9887063" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:90495" }, { "category": "workaround", "details": "See the security bulletin for a detailed mitigation procedure.", "product_ids": [ "CSAFPID-9887056", "CSAFPID-9887057", "CSAFPID-9887058", "CSAFPID-9887059", "CSAFPID-9887060", "CSAFPID-9887061", "CSAFPID-9887062", "CSAFPID-9887063", "CSAFPID-9887064", "CSAFPID-9887065", "CSAFPID-9887066", "CSAFPID-9887067", "CSAFPID-9887068", "CSAFPID-9887069", "CSAFPID-9887140", "CSAFPID-9887141", "CSAFPID-9887142", "CSAFPID-9887143", "CSAFPID-9887144", "CSAFPID-9887145", "CSAFPID-9887146", "CSAFPID-9887147", "CSAFPID-9913124", "CSAFPID-9913125", "CSAFPID-9913126", "CSAFPID-9913127", "CSAFPID-9913128", "CSAFPID-9913129", "CSAFPID-9913130", "CSAFPID-9913132", "CSAFPID-1442700", "CSAFPID-1485273", "CSAFPID-9913133", "CSAFPID-9913134", "CSAFPID-9913135", "CSAFPID-9913136", "CSAFPID-9913137", "CSAFPID-9913138", "CSAFPID-9913139", "CSAFPID-9913140", "CSAFPID-9913141", "CSAFPID-9913142", "CSAFPID-9913143", "CSAFPID-9913144", "CSAFPID-9913145", "CSAFPID-9913147", "CSAFPID-9913174", "CSAFPID-9913176", "CSAFPID-9913177", "CSAFPID-9913179", "CSAFPID-9913182", "CSAFPID-9913183", "CSAFPID-1442666", "CSAFPID-1695147", "CSAFPID-9913186", "CSAFPID-9913187", "CSAFPID-9913188", "CSAFPID-9913189", "CSAFPID-9913190", "CSAFPID-9913191", "CSAFPID-9913196", "CSAFPID-9913197", "CSAFPID-9913198", "CSAFPID-9913199", "CSAFPID-9913200", "CSAFPID-9913201", "CSAFPID-9913202", "CSAFPID-9913203", "CSAFPID-9913205", "CSAFPID-9913208", "CSAFPID-9913209", "CSAFPID-9913212", "CSAFPID-9913215", "CSAFPID-9913218", "CSAFPID-9913222", "CSAFPID-9913224" ] }, { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-9887064", "CSAFPID-9887065", "CSAFPID-9887066", "CSAFPID-9887067", "CSAFPID-9887068", "CSAFPID-9887069" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:90501" }, { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-9887140", "CSAFPID-9887141", "CSAFPID-9887142", "CSAFPID-9887143", "CSAFPID-9887144", "CSAFPID-9887145", "CSAFPID-9887146", "CSAFPID-9887147" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:90449" }, { "category": "vendor_fix", "details": "Patch pending. Apply the patches listed in the 'Fixed Version' column of the 'Response Matrix'.", "product_ids": [ "CSAFPID-2895890", "CSAFPID-9906028", "CSAFPID-9906031" ] }, { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-9913124", "CSAFPID-9913125", "CSAFPID-9913126", "CSAFPID-9913127", "CSAFPID-9913128", "CSAFPID-9913129", "CSAFPID-9913130", "CSAFPID-9913132" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:90888" }, { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-1442700", "CSAFPID-1485273", "CSAFPID-9913133", "CSAFPID-9913134", "CSAFPID-9913135", "CSAFPID-9913136", "CSAFPID-9913137", "CSAFPID-9913138" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:90893" }, { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-9913139", "CSAFPID-9913140", "CSAFPID-9913141", "CSAFPID-9913142", "CSAFPID-9913143", "CSAFPID-9913144", "CSAFPID-9913145", "CSAFPID-9913147" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:90889" }, { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-9913174", "CSAFPID-9913176", "CSAFPID-9913177", "CSAFPID-9913179", "CSAFPID-9913182", "CSAFPID-9913183" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:90891" }, { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-1442666", "CSAFPID-1695147", "CSAFPID-9913186", "CSAFPID-9913187", "CSAFPID-9913188", "CSAFPID-9913189", "CSAFPID-9913190", "CSAFPID-9913191" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:90892" }, { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-9913196", "CSAFPID-9913197", "CSAFPID-9913198", "CSAFPID-9913199", "CSAFPID-9913200", "CSAFPID-9913201", "CSAFPID-9913202", "CSAFPID-9913203" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:90890" }, { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-9913205", "CSAFPID-9913208", "CSAFPID-9913209", "CSAFPID-9913212", "CSAFPID-9913215", "CSAFPID-9913218", "CSAFPID-9913222", "CSAFPID-9913224" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:90914" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1295663", "CSAFPID-1317175", "CSAFPID-1317177", "CSAFPID-1317178", "CSAFPID-1330299", "CSAFPID-1363449", "CSAFPID-1408881", "CSAFPID-1439279", "CSAFPID-1439313", "CSAFPID-1439315", "CSAFPID-1439317", "CSAFPID-1439319", "CSAFPID-1439326", "CSAFPID-1439328", "CSAFPID-1459356", "CSAFPID-1459357", "CSAFPID-1459358", "CSAFPID-1459360", "CSAFPID-1459361", "CSAFPID-1508257", "CSAFPID-1520004", "CSAFPID-1771989", "CSAFPID-2008992", "CSAFPID-2518221", "CSAFPID-2858634", "CSAFPID-2873478", "CSAFPID-2876286", "CSAFPID-2895890", "CSAFPID-2942231", "CSAFPID-2967492", "CSAFPID-4480771", "CSAFPID-4480772", "CSAFPID-4480773", "CSAFPID-4480774", "CSAFPID-4480775", "CSAFPID-4544152", "CSAFPID-4544154", "CSAFPID-5137200", "CSAFPID-5137226", "CSAFPID-5158872", "CSAFPID-5158873", "CSAFPID-5158874", "CSAFPID-5172458", "CSAFPID-5172535", "CSAFPID-5181441", "CSAFPID-5181442", "CSAFPID-5181443", "CSAFPID-5181444", "CSAFPID-5181445", "CSAFPID-5181446", "CSAFPID-5181447", "CSAFPID-5181448", "CSAFPID-5181449", "CSAFPID-5181450", "CSAFPID-5337949", "CSAFPID-5826733", "CSAFPID-6014972", "CSAFPID-6017090", "CSAFPID-618092", "CSAFPID-618123", "CSAFPID-618124", "CSAFPID-6225812", "CSAFPID-6982270", "CSAFPID-6982271", "CSAFPID-9053224", "CSAFPID-9214514", "CSAFPID-9214515", "CSAFPID-9214516", "CSAFPID-9214517", "CSAFPID-9214518", "CSAFPID-9214519", "CSAFPID-9214520", "CSAFPID-9375621", "CSAFPID-9381589", "CSAFPID-9555827", "CSAFPID-9714430", "CSAFPID-9834981", "CSAFPID-9834982", "CSAFPID-9834983", "CSAFPID-9835428", "CSAFPID-9835429", "CSAFPID-9835430", "CSAFPID-9835432", "CSAFPID-9835433", "CSAFPID-9835434", "CSAFPID-9835435", "CSAFPID-9835436", "CSAFPID-9835439", "CSAFPID-9835442", "CSAFPID-9845195", "CSAFPID-9845535", "CSAFPID-9845536", "CSAFPID-9845537", "CSAFPID-9847982", "CSAFPID-9847983", "CSAFPID-9847984", "CSAFPID-9848566", "CSAFPID-9848567", "CSAFPID-9848568", "CSAFPID-9853728", "CSAFPID-9853729", "CSAFPID-9853730", "CSAFPID-9853731", "CSAFPID-9853732", "CSAFPID-9853733", "CSAFPID-9853734", "CSAFPID-9853735", "CSAFPID-9853736", "CSAFPID-9855725", "CSAFPID-9855726", "CSAFPID-9855727", "CSAFPID-9855728", "CSAFPID-9855729", "CSAFPID-9855730", "CSAFPID-9855731", "CSAFPID-9855732", "CSAFPID-9855733", "CSAFPID-9855734", "CSAFPID-9855735", "CSAFPID-9855736", "CSAFPID-9855737", "CSAFPID-9855738", "CSAFPID-9855739", "CSAFPID-9857551", "CSAFPID-9857552", "CSAFPID-9857553", "CSAFPID-9858016", "CSAFPID-9858017", "CSAFPID-9858018", "CSAFPID-9858019", "CSAFPID-9858020", "CSAFPID-9858021", "CSAFPID-9858022", "CSAFPID-9858023", "CSAFPID-9858024", "CSAFPID-9858025", "CSAFPID-9863490", "CSAFPID-9863491", "CSAFPID-9863492", "CSAFPID-9863620", "CSAFPID-9863621", "CSAFPID-9863622", "CSAFPID-9873048", "CSAFPID-9881334", "CSAFPID-9886380", "CSAFPID-9892886", "CSAFPID-9901046", "CSAFPID-9901047", "CSAFPID-9901048", "CSAFPID-9901049", "CSAFPID-9901050", "CSAFPID-9901051", "CSAFPID-9901052", "CSAFPID-9901053", "CSAFPID-9901054", "CSAFPID-9901055", "CSAFPID-9906028", "CSAFPID-9906031", "CSAFPID-9907794", "CSAFPID-9907795", "CSAFPID-9907796", "CSAFPID-9907797", "CSAFPID-9907798", "CSAFPID-9907799", "CSAFPID-9907800", "CSAFPID-9907801", "CSAFPID-9907802", "CSAFPID-9907803", "CSAFPID-9907804", "CSAFPID-9907805", "CSAFPID-9907806", "CSAFPID-9907807", "CSAFPID-9907808", "CSAFPID-9907809", "CSAFPID-9907810", "CSAFPID-9907811", "CSAFPID-9910920", "CSAFPID-9910921", "CSAFPID-9910922", "CSAFPID-9910923", "CSAFPID-9910924", "CSAFPID-9910925", "CSAFPID-9910926", "CSAFPID-9910927", "CSAFPID-9910928", "CSAFPID-9910929", "CSAFPID-9910930", "CSAFPID-9910931", "CSAFPID-9910932", "CSAFPID-9910933", "CSAFPID-9910934", "CSAFPID-9910935", "CSAFPID-9910936", "CSAFPID-9910937", "CSAFPID-9910938", "CSAFPID-9910939", "CSAFPID-9910940", "CSAFPID-9910941", "CSAFPID-9910942", "CSAFPID-9910943", "CSAFPID-9910944", "CSAFPID-9910945", "CSAFPID-9910946" ] } ], "threats": [ { "category": "exploit_status", "details": "Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely", "product_ids": [ "CSAFPID-1520004", "CSAFPID-2967492", "CSAFPID-5137200", "CSAFPID-6225812", "CSAFPID-9855725", "CSAFPID-9855726", "CSAFPID-9855727", "CSAFPID-9855728", "CSAFPID-9855729", "CSAFPID-9855730", "CSAFPID-9855731", "CSAFPID-9855732", "CSAFPID-9855733", "CSAFPID-9855734", "CSAFPID-9855735", "CSAFPID-9855736", "CSAFPID-9855737", "CSAFPID-9855738", "CSAFPID-9855739", "CSAFPID-9381589", "CSAFPID-9881334", "CSAFPID-5137226" ] }, { "category": "impact", "details": "Elevation of Privilege", "product_ids": [ "CSAFPID-1520004", "CSAFPID-2967492", "CSAFPID-5137200", "CSAFPID-6225812", "CSAFPID-9855725", "CSAFPID-9855726", "CSAFPID-9855727", "CSAFPID-9855728", "CSAFPID-9855729", "CSAFPID-9855730", "CSAFPID-9855731", "CSAFPID-9855732", "CSAFPID-9855733", "CSAFPID-9855734", "CSAFPID-9855735", "CSAFPID-9855736", "CSAFPID-9855737", "CSAFPID-9855738", "CSAFPID-9855739", "CSAFPID-5137226" ] }, { "category": "impact", "details": "Successful exploitation of this vulnerability could lead to disclosure of sensitive information, addition or modification of data or Denial of Service (DoS).", "product_ids": [ "CSAFPID-9873048" ] }, { "category": "exploit_status", "details": "exploited" } ], "title": "CVE-2026-111497" } ] }