{
"document": {
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "en",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "National Cyber Security Centre",
"namespace": "https://www.ncsc.nl/"
},
"title": "CVE-2026-29074",
"tracking": {
"current_release_date": "2026-04-02T13:06:35.895707Z",
"generator": {
"date": "2026-02-17T15:00:00Z",
"engine": {
"name": "V.E.L.M.A",
"version": "1.7"
}
},
"id": "CVE-2026-29074",
"initial_release_date": "2026-03-04T23:54:33.921725Z",
"revision_history": [
{
"date": "2026-03-04T23:54:33.921725Z",
"number": "1",
"summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (2).| CWES updated (1)."
},
{
"date": "2026-03-04T23:54:38.557923Z",
"number": "2",
"summary": "NCSC Score created."
},
{
"date": "2026-03-05T00:20:49.188938Z",
"number": "3",
"summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (4).| Product Identifiers created (1).| References created (1).| CWES updated (1)."
},
{
"date": "2026-03-05T00:21:02.713132Z",
"number": "4",
"summary": "NCSC Score updated."
},
{
"date": "2026-03-06T07:40:10.001259Z",
"number": "5",
"summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (3).| References created (1).| CWES updated (1)."
},
{
"date": "2026-03-06T07:40:16.690703Z",
"number": "6",
"summary": "NCSC Score updated."
},
{
"date": "2026-03-06T08:24:48.640963Z",
"number": "7",
"summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (1).| CWES updated (1)."
},
{
"date": "2026-03-06T08:24:50.880395Z",
"number": "8",
"summary": "NCSC Score updated."
},
{
"date": "2026-03-06T11:35:04.095292Z",
"number": "9",
"summary": "NCSC Score updated."
},
{
"date": "2026-03-06T14:52:21.996860Z",
"number": "10",
"summary": "Source created.| CVE status created. (valid)| EPSS created."
},
{
"date": "2026-03-06T16:38:59.103204Z",
"number": "11",
"summary": "Unknown change."
},
{
"date": "2026-03-06T22:39:35.805582Z",
"number": "12",
"summary": "References created (1)."
},
{
"date": "2026-03-06T23:28:19.582284Z",
"number": "13",
"summary": "NCSC Score updated."
},
{
"date": "2026-03-07T00:21:06.535193Z",
"number": "14",
"summary": "References created (1)."
},
{
"date": "2026-03-10T19:25:47.869830Z",
"number": "15",
"summary": "Products created (3).| Product Identifiers created (3).| Exploits created (1)."
},
{
"date": "2026-03-10T19:25:54.735645Z",
"number": "16",
"summary": "NCSC Score updated."
},
{
"date": "2026-03-20T09:35:43.859665Z",
"number": "17",
"summary": "Source connected.| CVE status created. (valid)| EPSS created."
},
{
"date": "2026-03-26T00:30:48.826918Z",
"number": "18",
"summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (28).| Product Remediations created (30).| References created (27).| CWES updated (1)."
},
{
"date": "2026-03-26T00:30:53.794176Z",
"number": "19",
"summary": "NCSC Score updated."
},
{
"date": "2026-04-01T00:30:47.827754Z",
"number": "20",
"summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (64).| Product Identifiers created (111).| Product Identifiers removed (111).| Product Remediations created (66).| Product Remediations removed (1).| References created (16).| CWES updated (1)."
},
{
"date": "2026-04-01T00:31:06.219575Z",
"number": "21",
"summary": "NCSC Score updated."
},
{
"date": "2026-04-01T11:28:48.785761Z",
"number": "22",
"summary": "Source connected.| CVE status created. (valid)| Products connected (2).| References created (4)."
},
{
"date": "2026-04-01T11:28:50.590310Z",
"number": "23",
"summary": "NCSC Score updated."
},
{
"date": "2026-04-01T12:36:07.929731Z",
"number": "24",
"summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (29).| Product Remediations created (31).| Product Identifiers created (104).| Product Identifiers removed (104).| References created (19).| CWES updated (1)."
},
{
"date": "2026-04-02T09:05:43.340969Z",
"number": "25",
"summary": "Products connected (3).| References created (4)."
},
{
"date": "2026-04-02T09:05:52.640338Z",
"number": "26",
"summary": "NCSC Score updated."
},
{
"date": "2026-04-02T12:29:03.957183Z",
"number": "27",
"summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (28).| Product Remediations created (30).| Product Identifiers created (100).| Product Identifiers removed (100).| References created (19).| CWES updated (1)."
},
{
"date": "2026-04-02T12:29:17.258998Z",
"number": "28",
"summary": "NCSC Score updated."
}
],
"status": "interim",
"version": "28"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/unknown",
"product": {
"name": "vers:unknown/unknown",
"product_id": "CSAFPID-1330296",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "product_name",
"name": "Amazon Linux 2"
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/<2.5",
"product": {
"name": "vers:unknown/<2.5",
"product_id": "CSAFPID-1384077"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/<2.6",
"product": {
"name": "vers:unknown/<2.6",
"product_id": "CSAFPID-5354794"
}
}
],
"category": "product_name",
"name": "Ansible Automation Platform"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6",
"product": {
"name": "vers:rpm/2.6",
"product_id": "CSAFPID-5153949",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
}
}
}
],
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.6"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6",
"product": {
"name": "vers:rpm/2.6",
"product_id": "CSAFPID-5256303",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
}
}
}
],
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 10"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6",
"product": {
"name": "vers:rpm/2.6",
"product_id": "CSAFPID-5153905",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9"
}
}
}
],
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/0.6.3-3.el9ap",
"product": {
"name": "vers:rpm/0.6.3-3.el9ap",
"product_id": "CSAFPID-5969807",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aap-metrics-utility@0.6.3-3.el9ap?arch=x86_64"
}
}
}
],
"category": "product_name",
"name": "aap-metrics-utility"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774139204",
"product": {
"name": "vers:oci/1774139204",
"product_id": "CSAFPID-5973066",
"product_identification_helper": {
"purl": "pkg:oci/aap-must-gather-rhel9@sha256%3Ae43db60ae78ea52aa60425b0bcd13d5660a72a3e888baa043125040df3b1e499?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774139204"
}
}
}
],
"category": "product_name",
"name": "aap-must-gather-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6-6.1.el9ap",
"product": {
"name": "vers:rpm/2.6-6.1.el9ap",
"product_id": "CSAFPID-5969808",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-automation-platform-installer@2.6-6.1.el9ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "ansible-automation-platform-installer"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774153089",
"product": {
"name": "vers:oci/1774153089",
"product_id": "CSAFPID-5973067",
"product_identification_helper": {
"purl": "pkg:oci/ansible-builder-rhel9@sha256%3Adb8e631f92329e1da78b76a7d510e6dace445aecdcba5b7d65896c4dde5b6d96?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774153089"
}
}
}
],
"category": "product_name",
"name": "ansible-builder-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.16.17-1.el9ap",
"product": {
"name": "vers:rpm/2.16.17-1.el9ap",
"product_id": "CSAFPID-5969794",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.17-1.el9ap?arch=src&epoch=1"
}
}
},
{
"category": "product_version_range",
"name": "vers:rpm/2.16.17-2.el10ap",
"product": {
"name": "vers:rpm/2.16.17-2.el10ap",
"product_id": "CSAFPID-5969785",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.17-2.el10ap?arch=src&epoch=2"
}
}
}
],
"category": "product_name",
"name": "ansible-core"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774585183",
"product": {
"name": "vers:oci/1774585183",
"product_id": "CSAFPID-5973068",
"product_identification_helper": {
"purl": "pkg:oci/ansible-dev-tools-rhel9@sha256%3A8f6d6144ac73ba9f0133ca1303405cb9f28309cea10213ad2a6745fe91221075?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774585183"
}
}
}
],
"category": "product_name",
"name": "ansible-dev-tools-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/1.2.2-1.el9ap",
"product": {
"name": "vers:rpm/1.2.2-1.el9ap",
"product_id": "CSAFPID-5969809",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-rulebook@1.2.2-1.el9ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "ansible-rulebook"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.16.17-1.el9ap",
"product": {
"name": "vers:rpm/2.16.17-1.el9ap",
"product_id": "CSAFPID-5969795",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-test@2.16.17-1.el9ap?arch=noarch&epoch=1"
}
}
}
],
"category": "product_name",
"name": "ansible-test"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/4.7.10-2.el9ap",
"product": {
"name": "vers:rpm/4.7.10-2.el9ap",
"product_id": "CSAFPID-5969796",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.7.10-2.el9ap?arch=x86_64"
}
}
}
],
"category": "product_name",
"name": "automation-controller"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/4.7.10-2.el9ap",
"product": {
"name": "vers:rpm/4.7.10-2.el9ap",
"product_id": "CSAFPID-5969797",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-cli@4.7.10-2.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "automation-controller-cli"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/4.7.10-2.el9ap",
"product": {
"name": "vers:rpm/4.7.10-2.el9ap",
"product_id": "CSAFPID-5969798",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-server@4.7.10-2.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "automation-controller-server"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/4.7.10-2.el9ap",
"product": {
"name": "vers:rpm/4.7.10-2.el9ap",
"product_id": "CSAFPID-5969799",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-ui@4.7.10-2.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "automation-controller-ui"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/4.7.10-2.el9ap",
"product": {
"name": "vers:rpm/4.7.10-2.el9ap",
"product_id": "CSAFPID-5969800",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.7.10-2.el9ap?arch=x86_64"
}
}
}
],
"category": "product_name",
"name": "automation-controller-venv-tower"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/1.2.7-1.el9ap",
"product": {
"name": "vers:rpm/1.2.7-1.el9ap",
"product_id": "CSAFPID-5969810",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.2.7-1.el9ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "automation-eda-controller"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/1.2.7-1.el9ap",
"product": {
"name": "vers:rpm/1.2.7-1.el9ap",
"product_id": "CSAFPID-5969811",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base@1.2.7-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "automation-eda-controller-base"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/1.2.7-1.el9ap",
"product": {
"name": "vers:rpm/1.2.7-1.el9ap",
"product_id": "CSAFPID-5969812",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base-services@1.2.7-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "automation-eda-controller-base-services"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/1.2.7-1.el9ap",
"product": {
"name": "vers:rpm/1.2.7-1.el9ap",
"product_id": "CSAFPID-5969813",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-event-stream-services@1.2.7-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "automation-eda-controller-event-stream-services"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/1.2.7-1.el9ap",
"product": {
"name": "vers:rpm/1.2.7-1.el9ap",
"product_id": "CSAFPID-5969814",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-worker-services@1.2.7-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "automation-eda-controller-worker-services"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.20260325-2.el9ap",
"product": {
"name": "vers:rpm/2.6.20260325-2.el9ap",
"product_id": "CSAFPID-5969815",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway@2.6.20260325-2.el9ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "automation-gateway"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.20260325-2.el9ap",
"product": {
"name": "vers:rpm/2.6.20260325-2.el9ap",
"product_id": "CSAFPID-5969816",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-config@2.6.20260325-2.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "automation-gateway-config"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.14-1.el9",
"product": {
"name": "vers:rpm/2.6.14-1.el9",
"product_id": "CSAFPID-5969781",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy@2.6.14-1.el9?arch=x86_64"
}
}
}
],
"category": "product_name",
"name": "automation-gateway-proxy"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.14-1.el9",
"product": {
"name": "vers:rpm/2.6.14-1.el9",
"product_id": "CSAFPID-5969782",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-debugsource@2.6.14-1.el9?arch=x86_64"
}
}
}
],
"category": "product_name",
"name": "automation-gateway-proxy-debugsource"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.14-1.el9",
"product": {
"name": "vers:rpm/2.6.14-1.el9",
"product_id": "CSAFPID-5969783",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server@2.6.14-1.el9?arch=x86_64"
}
}
}
],
"category": "product_name",
"name": "automation-gateway-proxy-server"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.14-1.el9",
"product": {
"name": "vers:rpm/2.6.14-1.el9",
"product_id": "CSAFPID-5969784",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server-debuginfo@2.6.14-1.el9?arch=x86_64"
}
}
}
],
"category": "product_name",
"name": "automation-gateway-proxy-server-debuginfo"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.20260325-2.el9ap",
"product": {
"name": "vers:rpm/2.6.20260325-2.el9ap",
"product_id": "CSAFPID-5969817",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-server@2.6.20260325-2.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "automation-gateway-server"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/4.11.7-1.el9ap",
"product": {
"name": "vers:rpm/4.11.7-1.el9ap",
"product_id": "CSAFPID-5969818",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.11.7-1.el9ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "automation-hub"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.7-1.el9ap",
"product": {
"name": "vers:rpm/2.6.7-1.el9ap",
"product_id": "CSAFPID-5969819",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-platform-ui@2.6.7-1.el9ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "automation-platform-ui"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774368903",
"product": {
"name": "vers:oci/1774368903",
"product_id": "CSAFPID-5973070",
"product_identification_helper": {
"purl": "pkg:oci/controller-rhel9@sha256%3Aa490261dea13fa75a1c4aa0a175da144c26a5dc727dc542609c25655adeb8819?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774368903"
}
}
}
],
"category": "product_name",
"name": "controller-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774484033",
"product": {
"name": "vers:oci/1774484033",
"product_id": "CSAFPID-5973069",
"product_identification_helper": {
"purl": "pkg:oci/controller-rhel9-operator@sha256%3Aee388c6cde6ddc916d0a727de14bf27aa2b4b276c10b252132ca3db00f4d5bc6?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774484033"
}
}
}
],
"category": "product_name",
"name": "controller-rhel9-operator"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774487884",
"product": {
"name": "vers:oci/1774487884",
"product_id": "CSAFPID-5973071",
"product_identification_helper": {
"purl": "pkg:oci/de-minimal-rhel9@sha256%3Ac67254bbf63fe1220d58de04f36770afd4a6835a8903d03233310b13ed134a3b?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774487884"
}
}
}
],
"category": "product_name",
"name": "de-minimal-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774490244",
"product": {
"name": "vers:oci/1774490244",
"product_id": "CSAFPID-5973072",
"product_identification_helper": {
"purl": "pkg:oci/de-supported-rhel9@sha256%3Afa5dd987c4032dd4749f81e265456b1abd3063c2b134434c32006d4a124a9dca?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774490244"
}
}
}
],
"category": "product_name",
"name": "de-supported-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774258433",
"product": {
"name": "vers:oci/1774258433",
"product_id": "CSAFPID-5973074",
"product_identification_helper": {
"purl": "pkg:oci/eda-controller-rhel9@sha256%3Af720d731ed73925d2e5b2eff3c2c821a0600352546577c5b45c087de78b6a95b?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774258433"
}
}
}
],
"category": "product_name",
"name": "eda-controller-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774484073",
"product": {
"name": "vers:oci/1774484073",
"product_id": "CSAFPID-5973073",
"product_identification_helper": {
"purl": "pkg:oci/eda-controller-rhel9-operator@sha256%3Afe0b1298bb9dbe8b981b83ac31761c3cf174dbc5b6adc6e3df39e7a238349822?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774484073"
}
}
}
],
"category": "product_name",
"name": "eda-controller-rhel9-operator"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774484106",
"product": {
"name": "vers:oci/1774484106",
"product_id": "CSAFPID-5973075",
"product_identification_helper": {
"purl": "pkg:oci/eda-controller-ui-rhel9@sha256%3Af95849a65d7c218be6c34619a8c8502f213d96f745ff73525fa898560230cafd?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774484106"
}
}
}
],
"category": "product_name",
"name": "eda-controller-ui-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774311517",
"product": {
"name": "vers:oci/1774311517",
"product_id": "CSAFPID-5973076",
"product_identification_helper": {
"purl": "pkg:oci/ee-minimal-rhel9@sha256%3Ab77fba98853eb0fabcbcd4981c347cf909f50e64ea32f4c0d8313d89cdb48cf7?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774311517"
}
}
}
],
"category": "product_name",
"name": "ee-minimal-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774321273",
"product": {
"name": "vers:oci/1774321273",
"product_id": "CSAFPID-5973077",
"product_identification_helper": {
"purl": "pkg:oci/ee-supported-rhel9@sha256%3Ad6adc9bd2df9fded6228ddd5dbca3919991913b40fb95b12d4d01cf96c5f4d60?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774321273"
}
}
}
],
"category": "product_name",
"name": "ee-supported-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774139334",
"product": {
"name": "vers:oci/1774139334",
"product_id": "CSAFPID-5973078",
"product_identification_helper": {
"purl": "pkg:oci/gateway-proxy-rhel9@sha256%3A92c85eabe94b95c63307991c3881acbd34a808c4f34ca57c66a97550ee51b884?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774139334"
}
}
}
],
"category": "product_name",
"name": "gateway-proxy-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774243862",
"product": {
"name": "vers:oci/1774243862",
"product_id": "CSAFPID-5973080",
"product_identification_helper": {
"purl": "pkg:oci/gateway-rhel9@sha256%3Aed7a7ba7daf1a16a600af6cf4a875588a4647f5541cb309634aaba6614abf027?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774243862"
}
}
}
],
"category": "product_name",
"name": "gateway-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774484129",
"product": {
"name": "vers:oci/1774484129",
"product_id": "CSAFPID-5973079",
"product_identification_helper": {
"purl": "pkg:oci/gateway-rhel9-operator@sha256%3Af0e905a88c717e674b96a13545fbeda55c7cc265e0cda3ef8e01f9b06d18a478?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774484129"
}
}
}
],
"category": "product_name",
"name": "gateway-rhel9-operator"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774644659",
"product": {
"name": "vers:oci/1774644659",
"product_id": "CSAFPID-5973082",
"product_identification_helper": {
"purl": "pkg:oci/hub-rhel9@sha256%3Ad204205c731ab29336afda6a28becce7500485001ca550ffd01432e9c0a291eb?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774644659"
}
}
}
],
"category": "product_name",
"name": "hub-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774484154",
"product": {
"name": "vers:oci/1774484154",
"product_id": "CSAFPID-5973081",
"product_identification_helper": {
"purl": "pkg:oci/hub-rhel9-operator@sha256%3Aa89fe49e49cfd10c9a11420eee13a1c813524524435b51a5d2ee729f4114b951?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774484154"
}
}
}
],
"category": "product_name",
"name": "hub-rhel9-operator"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774647780",
"product": {
"name": "vers:oci/1774647780",
"product_id": "CSAFPID-5973083",
"product_identification_helper": {
"purl": "pkg:oci/hub-web-rhel9@sha256%3Afad44c5cdfad40cae6acb29a6a543f1b830ca057f531263280a28ffffc5bd2c5?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774647780"
}
}
}
],
"category": "product_name",
"name": "hub-web-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774417022",
"product": {
"name": "vers:oci/1774417022",
"product_id": "CSAFPID-5973065",
"product_identification_helper": {
"purl": "pkg:oci/lightspeed-chatbot-rhel9@sha256%3Ad17dce8e1cc199e35217043b9b80a0d748520cf40204713ba872b5ce14ebf7cc?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774417022"
}
}
}
],
"category": "product_name",
"name": "lightspeed-chatbot-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774363040",
"product": {
"name": "vers:oci/1774363040",
"product_id": "CSAFPID-5973085",
"product_identification_helper": {
"purl": "pkg:oci/lightspeed-rhel9@sha256%3Adb0b40d9a8190c7598de5537df75c83923a48d1927d733ceef4764d35d8056d7?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774363040"
}
}
}
],
"category": "product_name",
"name": "lightspeed-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774484113",
"product": {
"name": "vers:oci/1774484113",
"product_id": "CSAFPID-5973084",
"product_identification_helper": {
"purl": "pkg:oci/lightspeed-rhel9-operator@sha256%3Accf651f792eb389d5cb6516728c6cc5a031e647de3a18cf5d51f3bd2819804b2?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774484113"
}
}
}
],
"category": "product_name",
"name": "lightspeed-rhel9-operator"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774268173",
"product": {
"name": "vers:oci/1774268173",
"product_id": "CSAFPID-5973090",
"product_identification_helper": {
"purl": "pkg:oci/mcp-server-rhel9@sha256%3A6375a3333e8e8443dd702ed5235ddf9b3b6578a6024a917455fdd82f1f38d004?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-tech-preview&tag=1774268173"
}
}
}
],
"category": "product_name",
"name": "mcp-server-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774268174",
"product": {
"name": "vers:oci/1774268174",
"product_id": "CSAFPID-5973086",
"product_identification_helper": {
"purl": "pkg:oci/mcp-tools-rhel9@sha256%3A7510d2566f94e33ef189efd5d92a9e213c5cf50610765c255160851538cb7082?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774268174"
}
}
}
],
"category": "product_name",
"name": "mcp-tools-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774540248",
"product": {
"name": "vers:oci/1774540248",
"product_id": "CSAFPID-5984227",
"product_identification_helper": {
"purl": "pkg:oci/metrics-service-rhel9@sha256%3Ac8425cc65b52b3b3538036873f74e4fd9dbeec54254f95f94108003421f45b4e?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-tech-preview&tag=1774540248"
}
}
}
],
"category": "product_name",
"name": "metrics-service-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774648896",
"product": {
"name": "vers:oci/1774648896",
"product_id": "CSAFPID-5973091",
"product_identification_helper": {
"purl": "pkg:oci/platform-operator-bundle@sha256%3A79abdf5f9c95b6792765db2b69c8b6cb68eef889674d39203080044bee5fc556?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform&tag=1774648896"
}
}
},
{
"category": "product_version_range",
"name": "vers:oci/1774648925",
"product": {
"name": "vers:oci/1774648925",
"product_id": "CSAFPID-5973092",
"product_identification_helper": {
"purl": "pkg:oci/platform-operator-bundle@sha256%3Af27581c3a84be7fc387d230aad9e3922caac3f5c59aff779a60aa149877f48e1?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform&tag=1774648925"
}
}
}
],
"category": "product_name",
"name": "platform-operator-bundle"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774484549",
"product": {
"name": "vers:oci/1774484549",
"product_id": "CSAFPID-5973087",
"product_identification_helper": {
"purl": "pkg:oci/platform-resource-rhel9-operator@sha256%3Abc51280e45f6375ca3d45d859161790934ef76ed59c747a2960720d58c7ee219?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774484549"
}
}
}
],
"category": "product_name",
"name": "platform-resource-rhel9-operator"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774485790",
"product": {
"name": "vers:oci/1774485790",
"product_id": "CSAFPID-5973088",
"product_identification_helper": {
"purl": "pkg:oci/platform-resource-runner-rhel9@sha256%3Af0bc302bdd30b28257768ad3756173b4bc63c2d11b3d673e3df4bfa596224b51?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774485790"
}
}
}
],
"category": "product_name",
"name": "platform-resource-runner-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/3.11.1-2.el10ap",
"product": {
"name": "vers:rpm/3.11.1-2.el10ap",
"product_id": "CSAFPID-5969786",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-asgiref@3.11.1-2.el10ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "python-asgiref"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/5.2.12-2.el10ap",
"product": {
"name": "vers:rpm/5.2.12-2.el10ap",
"product_id": "CSAFPID-5969787",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-django@5.2.12-2.el10ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "python-django"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/3.11.1-2.el10ap",
"product": {
"name": "vers:rpm/3.11.1-2.el10ap",
"product_id": "CSAFPID-5969788",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-asgiref@3.11.1-2.el10ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "python3-asgiref"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/5.2.12-2.el10ap",
"product": {
"name": "vers:rpm/5.2.12-2.el10ap",
"product_id": "CSAFPID-5969789",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-django@5.2.12-2.el10ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "python3-django"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/3.11.1-1.el9ap",
"product": {
"name": "vers:rpm/3.11.1-1.el9ap",
"product_id": "CSAFPID-5969801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-asgiref@3.11.1-1.el9ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "python3.12-asgiref"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/4.3.2-1.el9ap",
"product": {
"name": "vers:rpm/4.3.2-1.el9ap",
"product_id": "CSAFPID-5969821",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-channels@4.3.2-1.el9ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "python3.12-channels"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/4.3.2-1.el9ap",
"product": {
"name": "vers:rpm/4.3.2-1.el9ap",
"product_id": "CSAFPID-5969820",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-channels%2Bdaphne@4.3.2-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "python3.12-channels%2Bdaphne"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/5.2.12-1.el9ap",
"product": {
"name": "vers:rpm/5.2.12-1.el9ap",
"product_id": "CSAFPID-5969802",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django@5.2.12-1.el9ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "python3.12-django"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product": {
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product_id": "CSAFPID-5969833",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base@2.6.20260325-1.el9ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "python3.12-django-ansible-base"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product": {
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product_id": "CSAFPID-5969822",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bactivitystream@2.6.20260325-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "python3.12-django-ansible-base%2Bactivitystream"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product": {
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product_id": "CSAFPID-5969823",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bapi_documentation@2.6.20260325-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "python3.12-django-ansible-base%2Bapi_documentation"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product": {
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product_id": "CSAFPID-5969824",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bauthentication@2.6.20260325-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "python3.12-django-ansible-base%2Bauthentication"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product": {
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product_id": "CSAFPID-5969825",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bchannel_auth@2.6.20260325-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "python3.12-django-ansible-base%2Bchannel_auth"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product": {
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product_id": "CSAFPID-5969826",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bfeature_flags@2.6.20260325-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "python3.12-django-ansible-base%2Bfeature_flags"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product": {
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product_id": "CSAFPID-5969827",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bjwt_consumer@2.6.20260325-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "python3.12-django-ansible-base%2Bjwt_consumer"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product": {
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product_id": "CSAFPID-5969828",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Boauth2_provider@2.6.20260325-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "python3.12-django-ansible-base%2Boauth2_provider"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product": {
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product_id": "CSAFPID-5969829",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Brbac@2.6.20260325-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "python3.12-django-ansible-base%2Brbac"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product": {
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product_id": "CSAFPID-5969830",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bredis_client@2.6.20260325-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "python3.12-django-ansible-base%2Bredis_client"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product": {
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product_id": "CSAFPID-5969831",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bresource_registry@2.6.20260325-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "python3.12-django-ansible-base%2Bresource_registry"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product": {
"name": "vers:rpm/2.6.20260325-1.el9ap",
"product_id": "CSAFPID-5969832",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Brest_filters@2.6.20260325-1.el9ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "python3.12-django-ansible-base%2Brest_filters"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/25.2-1.el9ap",
"product": {
"name": "vers:rpm/25.2-1.el9ap",
"product_id": "CSAFPID-5969834",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django-filter@25.2-1.el9ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "python3.12-django-filter"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/0.29.0-1.el9ap",
"product": {
"name": "vers:rpm/0.29.0-1.el9ap",
"product_id": "CSAFPID-5969835",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-drf-spectacular@0.29.0-1.el9ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "python3.12-drf-spectacular"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/4.11.7-2.el9ap",
"product": {
"name": "vers:rpm/4.11.7-2.el9ap",
"product_id": "CSAFPID-5969836",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.11.7-2.el9ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "python3.12-galaxy-ng"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/12.1.1-1.el9ap",
"product": {
"name": "vers:rpm/12.1.1-1.el9ap",
"product_id": "CSAFPID-5969837",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow@12.1.1-1.el9ap?arch=x86_64"
}
}
}
],
"category": "product_name",
"name": "python3.12-pillow"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/12.1.1-1.el9ap",
"product": {
"name": "vers:rpm/12.1.1-1.el9ap",
"product_id": "CSAFPID-5969838",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debuginfo@12.1.1-1.el9ap?arch=x86_64"
}
}
}
],
"category": "product_name",
"name": "python3.12-pillow-debuginfo"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/12.1.1-1.el9ap",
"product": {
"name": "vers:rpm/12.1.1-1.el9ap",
"product_id": "CSAFPID-5969839",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pillow-debugsource@12.1.1-1.el9ap?arch=x86_64"
}
}
}
],
"category": "product_name",
"name": "python3.12-pillow-debugsource"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/0.25.4-1.el9ap",
"product": {
"name": "vers:rpm/0.25.4-1.el9ap",
"product_id": "CSAFPID-5969840",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-ansible@0.25.4-1.el9ap?arch=src&epoch=1"
}
}
}
],
"category": "product_name",
"name": "python3.12-pulp-ansible"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.19.8-1.el9ap",
"product": {
"name": "vers:rpm/2.19.8-1.el9ap",
"product_id": "CSAFPID-5969841",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.19.8-1.el9ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "python3.12-pulp-container"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/3.49.54-1.el9ap",
"product": {
"name": "vers:rpm/3.49.54-1.el9ap",
"product_id": "CSAFPID-5969842",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.49.54-1.el9ap?arch=src"
}
}
}
],
"category": "product_name",
"name": "python3.12-pulpcore"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/1.6.4-1.el9ap",
"product": {
"name": "vers:rpm/1.6.4-1.el9ap",
"product_id": "CSAFPID-5969803",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.4-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version_range",
"name": "vers:rpm/1.6.4-2.el10ap",
"product": {
"name": "vers:rpm/1.6.4-2.el10ap",
"product_id": "CSAFPID-5969790",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.4-2.el10ap?arch=x86_64"
}
}
}
],
"category": "product_name",
"name": "receptor"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/1.6.4-1.el9ap",
"product": {
"name": "vers:rpm/1.6.4-1.el9ap",
"product_id": "CSAFPID-5969804",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.4-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version_range",
"name": "vers:rpm/1.6.4-2.el10ap",
"product": {
"name": "vers:rpm/1.6.4-2.el10ap",
"product_id": "CSAFPID-5969791",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.4-2.el10ap?arch=x86_64"
}
}
}
],
"category": "product_name",
"name": "receptor-debuginfo"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/1.6.4-1.el9ap",
"product": {
"name": "vers:rpm/1.6.4-1.el9ap",
"product_id": "CSAFPID-5969805",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.4-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version_range",
"name": "vers:rpm/1.6.4-2.el10ap",
"product": {
"name": "vers:rpm/1.6.4-2.el10ap",
"product_id": "CSAFPID-5969792",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.4-2.el10ap?arch=x86_64"
}
}
}
],
"category": "product_name",
"name": "receptor-debugsource"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774573035",
"product": {
"name": "vers:oci/1774573035",
"product_id": "CSAFPID-5973089",
"product_identification_helper": {
"purl": "pkg:oci/receptor-rhel9@sha256%3Af00b87dd79fb1e56c8f4368026c9aed45ab5febe832bd98a7c718f965ab6656c?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774573035"
}
}
}
],
"category": "product_name",
"name": "receptor-rhel9"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/1.6.4-1.el9ap",
"product": {
"name": "vers:rpm/1.6.4-1.el9ap",
"product_id": "CSAFPID-5969806",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptorctl@1.6.4-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version_range",
"name": "vers:rpm/1.6.4-2.el10ap",
"product": {
"name": "vers:rpm/1.6.4-2.el10ap",
"product_id": "CSAFPID-5969793",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptorctl@1.6.4-2.el10ap?arch=noarch"
}
}
}
],
"category": "product_name",
"name": "receptorctl"
}
],
"category": "product_family",
"name": "Red Hat Ansible Automation Platform"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/unknown",
"product": {
"name": "vers:unknown/unknown",
"product_id": "CSAFPID-1317175",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "product_name",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:rpm/2.16",
"product": {
"name": "vers:rpm/2.16",
"product_id": "CSAFPID-2576489",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_ai:2.16::el8"
}
}
}
],
"category": "product_name",
"name": "Red Hat OpenShift AI 2.16"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282100",
"product": {
"name": "vers:oci/1774282100",
"product_id": "CSAFPID-5912786",
"product_identification_helper": {
"purl": "pkg:oci/odh-codeflare-operator-rhel8@sha256%3Ab68b73951beeabe942be43f65e778ff98e1cdfc6fdb4b052794f0cd4b191b819?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282100"
}
}
}
],
"category": "product_name",
"name": "odh-codeflare-operator-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282136",
"product": {
"name": "vers:oci/1774282136",
"product_id": "CSAFPID-5912787",
"product_identification_helper": {
"purl": "pkg:oci/odh-dashboard-rhel8@sha256%3A022c21f044dead0ff28bfc5fb5fb2fd51f3ed8e1a6cfc90bd18222abf0388018?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282136"
}
}
}
],
"category": "product_name",
"name": "odh-dashboard-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282136",
"product": {
"name": "vers:oci/1774282136",
"product_id": "CSAFPID-5912788",
"product_identification_helper": {
"purl": "pkg:oci/odh-data-science-pipelines-argo-argoexec-rhel8@sha256%3Afd02f0f70e38c947cdc307be3d9660f87262d92c5a361fa1bf68f24a72c91476?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282136"
}
}
}
],
"category": "product_name",
"name": "odh-data-science-pipelines-argo-argoexec-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774288148",
"product": {
"name": "vers:oci/1774288148",
"product_id": "CSAFPID-5912789",
"product_identification_helper": {
"purl": "pkg:oci/odh-data-science-pipelines-argo-workflowcontroller-rhel8@sha256%3A4e77720ec7972239d2b5198afc01ebd5dd777a1f75c2d19dbfeeb44f7adf729c?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774288148"
}
}
}
],
"category": "product_name",
"name": "odh-data-science-pipelines-argo-workflowcontroller-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282078",
"product": {
"name": "vers:oci/1774282078",
"product_id": "CSAFPID-5912790",
"product_identification_helper": {
"purl": "pkg:oci/odh-data-science-pipelines-operator-controller-rhel8@sha256%3A64b60a2fcfb9806422127db0a7c42f665fa41f47cbe8fe2b98c6bc20b6a1bf28?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282078"
}
}
}
],
"category": "product_name",
"name": "odh-data-science-pipelines-operator-controller-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282201",
"product": {
"name": "vers:oci/1774282201",
"product_id": "CSAFPID-5912791",
"product_identification_helper": {
"purl": "pkg:oci/odh-kf-notebook-controller-rhel8@sha256%3Ab26f5118ae8e7e25783233698fe0d5df1e56cde8d75f745204d9f78c4d838412?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282201"
}
}
}
],
"category": "product_name",
"name": "odh-kf-notebook-controller-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282134",
"product": {
"name": "vers:oci/1774282134",
"product_id": "CSAFPID-5912792",
"product_identification_helper": {
"purl": "pkg:oci/odh-kuberay-operator-controller-rhel8@sha256%3A9855fe0311c11b91fa38d205a65c0ad41b9447267408b3e7eb8f9b4c1d727acf?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282134"
}
}
}
],
"category": "product_name",
"name": "odh-kuberay-operator-controller-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282087",
"product": {
"name": "vers:oci/1774282087",
"product_id": "CSAFPID-5912793",
"product_identification_helper": {
"purl": "pkg:oci/odh-kueue-controller-rhel8@sha256%3Af38932929d45522b0cfd9e2dd87682a3495688aad859b3a8dac51398860e0e95?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282087"
}
}
}
],
"category": "product_name",
"name": "odh-kueue-controller-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282268",
"product": {
"name": "vers:oci/1774282268",
"product_id": "CSAFPID-5912794",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-api-server-v2-rhel8@sha256%3Ac46e2392d44830fc612d1dc41ed953352dadcef696bc50a848d2cc5de694e1ca?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282268"
}
}
}
],
"category": "product_name",
"name": "odh-ml-pipelines-api-server-v2-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282328",
"product": {
"name": "vers:oci/1774282328",
"product_id": "CSAFPID-5912795",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-driver-rhel8@sha256%3A0a30729330611926e635ec292bac2f5b7ce9f677aaff7f84b23549b2bbbd506d?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282328"
}
}
}
],
"category": "product_name",
"name": "odh-ml-pipelines-driver-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282116",
"product": {
"name": "vers:oci/1774282116",
"product_id": "CSAFPID-5912796",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-launcher-rhel8@sha256%3Ab82bbdac9d911544af8bc55ce7e688610be23cf6c31676af30fea76e3613d125?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282116"
}
}
}
],
"category": "product_name",
"name": "odh-ml-pipelines-launcher-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282159",
"product": {
"name": "vers:oci/1774282159",
"product_id": "CSAFPID-5912797",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-persistenceagent-v2-rhel8@sha256%3A9cfe909d46447d1dad8fd6a2319873d43b680b260d31f009eb086e22ad706f16?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282159"
}
}
}
],
"category": "product_name",
"name": "odh-ml-pipelines-persistenceagent-v2-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282202",
"product": {
"name": "vers:oci/1774282202",
"product_id": "CSAFPID-5912798",
"product_identification_helper": {
"purl": "pkg:oci/odh-ml-pipelines-scheduledworkflow-v2-rhel8@sha256%3A87129d071d526f8e4fe597f23ea169bf3920e0d52b7a7698e8c5685ef84b8f4a?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282202"
}
}
}
],
"category": "product_name",
"name": "odh-ml-pipelines-scheduledworkflow-v2-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774283932",
"product": {
"name": "vers:oci/1774283932",
"product_id": "CSAFPID-5912799",
"product_identification_helper": {
"purl": "pkg:oci/odh-mlmd-grpc-server-rhel8@sha256%3A07d85d51bfd8caddf447d7ea8c9b0c30879c03d8c3b9110cb86fc54e63ff0b48?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774283932"
}
}
}
],
"category": "product_name",
"name": "odh-mlmd-grpc-server-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282095",
"product": {
"name": "vers:oci/1774282095",
"product_id": "CSAFPID-5912800",
"product_identification_helper": {
"purl": "pkg:oci/odh-mm-rest-proxy-rhel8@sha256%3Aace145ce198785d2b587c4206d915f3c0e0ebe0b051cdd16ccc82cbc74e11352?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282095"
}
}
}
],
"category": "product_name",
"name": "odh-mm-rest-proxy-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774286327",
"product": {
"name": "vers:oci/1774286327",
"product_id": "CSAFPID-5912785",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-controller-rhel8@sha256%3Aa880b9fd06cd7206e3397025371ba3a3655798be5d64bed620f3847ff6a0b5ac?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774286327"
}
}
}
],
"category": "product_name",
"name": "odh-model-controller-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282093",
"product": {
"name": "vers:oci/1774282093",
"product_id": "CSAFPID-5912801",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-registry-operator-rhel8@sha256%3A8b7e95c316a28938a37b885d3e5c0503728add4b75066f3953430e5385dcacf5?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282093"
}
}
}
],
"category": "product_name",
"name": "odh-model-registry-operator-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282092",
"product": {
"name": "vers:oci/1774282092",
"product_id": "CSAFPID-5912802",
"product_identification_helper": {
"purl": "pkg:oci/odh-model-registry-rhel8@sha256%3A14245353d924e3416f1b637ba1fec18a3218d9402965ff0acdfd2497e294f9ae?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282092"
}
}
}
],
"category": "product_name",
"name": "odh-model-registry-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282058",
"product": {
"name": "vers:oci/1774282058",
"product_id": "CSAFPID-5912803",
"product_identification_helper": {
"purl": "pkg:oci/odh-modelmesh-rhel8@sha256%3Aabdb41f0a3c3f60094b48b2b69545968292446e3a609c42fdb51f27b4ef7ae81?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282058"
}
}
}
],
"category": "product_name",
"name": "odh-modelmesh-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774283191",
"product": {
"name": "vers:oci/1774283191",
"product_id": "CSAFPID-5912804",
"product_identification_helper": {
"purl": "pkg:oci/odh-modelmesh-runtime-adapter-rhel8@sha256%3Aa291cd5f04c559fd16477ae2ad364a350c4bf0c5a3f5aa2e614260fd4a5bece2?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774283191"
}
}
}
],
"category": "product_name",
"name": "odh-modelmesh-runtime-adapter-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282244",
"product": {
"name": "vers:oci/1774282244",
"product_id": "CSAFPID-5912805",
"product_identification_helper": {
"purl": "pkg:oci/odh-modelmesh-serving-controller-rhel8@sha256%3Aae2514c29fedec9401a594ca3fe5e7ca132d23f2f2a1966b5f6cc7bb8b99d75b?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282244"
}
}
}
],
"category": "product_name",
"name": "odh-modelmesh-serving-controller-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282170",
"product": {
"name": "vers:oci/1774282170",
"product_id": "CSAFPID-5912806",
"product_identification_helper": {
"purl": "pkg:oci/odh-notebook-controller-rhel8@sha256%3Aaa551353c01d864361785cded067ec32e5bb3e478964aa540749b6a23f93b4db?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282170"
}
}
}
],
"category": "product_name",
"name": "odh-notebook-controller-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774296584",
"product": {
"name": "vers:oci/1774296584",
"product_id": "CSAFPID-5912807",
"product_identification_helper": {
"purl": "pkg:oci/odh-operator-bundle@sha256%3A9407349c0fbf8d8be227d61d21e4ca9cc2d640c18ca040dfd94c33f0b1250f29?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774296584"
}
}
}
],
"category": "product_name",
"name": "odh-operator-bundle"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774293140",
"product": {
"name": "vers:oci/1774293140",
"product_id": "CSAFPID-5912808",
"product_identification_helper": {
"purl": "pkg:oci/odh-rhel8-operator@sha256%3A2e62a8a86b30347004012213f9af230d957cbb3f96771aa68490be6a3e22d949?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774293140"
}
}
}
],
"category": "product_name",
"name": "odh-rhel8-operator"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282093",
"product": {
"name": "vers:oci/1774282093",
"product_id": "CSAFPID-5912809",
"product_identification_helper": {
"purl": "pkg:oci/odh-training-operator-rhel8@sha256%3A6617c8beeb481dd39ae877b08361a377bc946fdf97787445bbec5bb3a0a0be1c?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282093"
}
}
}
],
"category": "product_name",
"name": "odh-training-operator-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774285579",
"product": {
"name": "vers:oci/1774285579",
"product_id": "CSAFPID-5912810",
"product_identification_helper": {
"purl": "pkg:oci/odh-trustyai-service-operator-rhel8@sha256%3A297d22ca72b764328f7d0b85f7f7c013c91ca85d70f08be45a6689c85da6b311?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774285579"
}
}
}
],
"category": "product_name",
"name": "odh-trustyai-service-operator-rhel8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:oci/1774282073",
"product": {
"name": "vers:oci/1774282073",
"product_id": "CSAFPID-5912811",
"product_identification_helper": {
"purl": "pkg:oci/odh-trustyai-service-rhel8@sha256%3A92571ea118c1b28b480cd40c1006e8d057e959cd2fd8e01f300926ccadd46fc7?arch=amd64&repository_url=registry.redhat.io/rhoai&tag=1774282073"
}
}
}
],
"category": "product_name",
"name": "odh-trustyai-service-rhel8"
}
],
"category": "product_family",
"name": "Red Hat OpenShift AI"
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/unknown",
"product": {
"name": "vers:unknown/unknown",
"product_id": "CSAFPID-1317174",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "product_name",
"name": "SuSE Linux"
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/4.0.0",
"product": {
"name": "vers:unknown/4.0.0",
"product_id": "CSAFPID-5759788",
"product_identification_helper": {
"purl": "pkg:npm/svgo@4.0.0"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/>=2.1.0|<2.8.1",
"product": {
"name": "vers:unknown/>=2.1.0|<2.8.1",
"product_id": "CSAFPID-5759786"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/>=3.0.0|<3.3.3",
"product": {
"name": "vers:unknown/>=3.0.0|<3.3.3",
"product_id": "CSAFPID-5759787"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/>=4.0.0|<4.0.1",
"product": {
"name": "vers:unknown/>=4.0.0|<4.0.1",
"product_id": "CSAFPID-5759789"
}
}
],
"category": "product_name",
"name": "svgo"
}
],
"category": "vendor",
"name": "svg"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/>=2.1.0|<2.8.1",
"product": {
"name": "vers:unknown/>=2.1.0|<2.8.1",
"product_id": "CSAFPID-5776954",
"product_identification_helper": {
"cpe": "cpe:2.3:a:svgo:svgo:*:*:*:*:*:node.js:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/>=3.0.0|<3.3.3",
"product": {
"name": "vers:unknown/>=3.0.0|<3.3.3",
"product_id": "CSAFPID-5776955",
"product_identification_helper": {
"cpe": "cpe:2.3:a:svgo:svgo:*:*:*:*:*:node.js:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/>=4.0.0|<4.0.1",
"product": {
"name": "vers:unknown/>=4.0.0|<4.0.1",
"product_id": "CSAFPID-5776956",
"product_identification_helper": {
"cpe": "cpe:2.3:a:svgo:svgo:*:*:*:*:*:node.js:*:*"
}
}
}
],
"category": "product_name",
"name": "svgo"
}
],
"category": "vendor",
"name": "svgo"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')"
},
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"CSAFPID-5912785",
"CSAFPID-5912786",
"CSAFPID-5912788",
"CSAFPID-5912789",
"CSAFPID-5912790",
"CSAFPID-5912791",
"CSAFPID-5912792",
"CSAFPID-5912793",
"CSAFPID-5912794",
"CSAFPID-5912795",
"CSAFPID-5912796",
"CSAFPID-5912797",
"CSAFPID-5912798",
"CSAFPID-5912799",
"CSAFPID-5912800",
"CSAFPID-5912801",
"CSAFPID-5912802",
"CSAFPID-5912803",
"CSAFPID-5912804",
"CSAFPID-5912805",
"CSAFPID-5912806",
"CSAFPID-5912807",
"CSAFPID-5912808",
"CSAFPID-5912809",
"CSAFPID-5912810",
"CSAFPID-5912811",
"CSAFPID-5969781",
"CSAFPID-5969782",
"CSAFPID-5969783",
"CSAFPID-5969784",
"CSAFPID-5969785",
"CSAFPID-5969786",
"CSAFPID-5969787",
"CSAFPID-5969788",
"CSAFPID-5969789",
"CSAFPID-5969790",
"CSAFPID-5969791",
"CSAFPID-5969792",
"CSAFPID-5969793",
"CSAFPID-5969794",
"CSAFPID-5969795",
"CSAFPID-5969796",
"CSAFPID-5969797",
"CSAFPID-5969798",
"CSAFPID-5969799",
"CSAFPID-5969800",
"CSAFPID-5969801",
"CSAFPID-5969802",
"CSAFPID-5969803",
"CSAFPID-5969804",
"CSAFPID-5969805",
"CSAFPID-5969806",
"CSAFPID-5969807",
"CSAFPID-5969808",
"CSAFPID-5969809",
"CSAFPID-5969810",
"CSAFPID-5969811",
"CSAFPID-5969812",
"CSAFPID-5969813",
"CSAFPID-5969814",
"CSAFPID-5969815",
"CSAFPID-5969816",
"CSAFPID-5969817",
"CSAFPID-5969818",
"CSAFPID-5969820",
"CSAFPID-5969821",
"CSAFPID-5969822",
"CSAFPID-5969823",
"CSAFPID-5969824",
"CSAFPID-5969825",
"CSAFPID-5969826",
"CSAFPID-5969827",
"CSAFPID-5969828",
"CSAFPID-5969829",
"CSAFPID-5969830",
"CSAFPID-5969831",
"CSAFPID-5969832",
"CSAFPID-5969833",
"CSAFPID-5969834",
"CSAFPID-5969835",
"CSAFPID-5969836",
"CSAFPID-5969837",
"CSAFPID-5969838",
"CSAFPID-5969839",
"CSAFPID-5969840",
"CSAFPID-5969841",
"CSAFPID-5969842",
"CSAFPID-5973065",
"CSAFPID-5973066",
"CSAFPID-5973067",
"CSAFPID-5973068",
"CSAFPID-5973069",
"CSAFPID-5973070",
"CSAFPID-5973071",
"CSAFPID-5973072",
"CSAFPID-5973073",
"CSAFPID-5973074",
"CSAFPID-5973075",
"CSAFPID-5973076",
"CSAFPID-5973077",
"CSAFPID-5973078",
"CSAFPID-5973079",
"CSAFPID-5973081",
"CSAFPID-5973082",
"CSAFPID-5973083",
"CSAFPID-5973084",
"CSAFPID-5973085",
"CSAFPID-5973086",
"CSAFPID-5973087",
"CSAFPID-5973088",
"CSAFPID-5973089",
"CSAFPID-5973090",
"CSAFPID-5973091",
"CSAFPID-5973092",
"CSAFPID-5973065",
"CSAFPID-5973066",
"CSAFPID-5973067",
"CSAFPID-5973068",
"CSAFPID-5973069",
"CSAFPID-5973070",
"CSAFPID-5973071",
"CSAFPID-5973072",
"CSAFPID-5973073",
"CSAFPID-5973074",
"CSAFPID-5973075",
"CSAFPID-5973078",
"CSAFPID-5973079",
"CSAFPID-5973081",
"CSAFPID-5973082",
"CSAFPID-5973083",
"CSAFPID-5973084",
"CSAFPID-5973085",
"CSAFPID-5973086",
"CSAFPID-5973087",
"CSAFPID-5973088",
"CSAFPID-5973089",
"CSAFPID-5973090",
"CSAFPID-5973091",
"CSAFPID-5973092",
"CSAFPID-5984227"
]
}
],
"notes": [
{
"category": "description",
"text": "### Summary\n\nSVGO accepts XML with custom entities, without guards against entity expansion or recursion. This can result in a small XML file (811 bytes) stalling the application and even crashing the Node.js process with `JavaScript heap out of memory`.\n\n### Details\n\nThe upstream XML parser ([sax](https://www.npmjs.com/package/sax)) doesn't interpret custom XML entities by default. We pattern matched custom XML entities from the `DOCTYPE`, inserting them into `parser.ENTITIES`, and enabled `unparsedEntities`. This gives us the desired behavior of supporting SVGs with entities declared in the `DOCTYPE`.\n\nHowever, entities can reference other entities, which can enable small SVGs to explode exponentially when we try to parse them.\n\n#### Proof of Concept\n\n```js\nimport { optimize } from 'svgo';\n\n/** Presume that this string was obtained in some other way, such as network. */\nconst original = `\n \n \n \n \n \n \n \n \n \n \n \n \n ]>\n &lol9;\n`;\n\noptimize(original);\n```\n\n### Impact\n\nIf SVGO is run on untrusted input (i.e., user uploaded to server-side application), then the untrusted SVG can effectively stall or crash the application with an SVG < 1 KB in size.\n\nIt's unlikely to impact users who just use SVGO locally on their own SVGs or in build pipelines.\n\n### Patches\n\nSVGO has patched v4.0.1, v3.3.3, and v2.8.1! However, it's strongly recommended to upgrade to v4 regardless, as previous versions are not officially supported anymore.\n\n### Workarounds\n\n#### == 4.0.0\n\nFor v4, users do not specifically have to upgrade SVGO, though it is recommended to do so. A package manager can be used to upgrade sax recursively:\n\nFor example:\n\n```sh\nyarn up -R sax\n```\n\nNew options were introduced upstream which makes the way SVGO parses SVGs safe by default.\n\n#### >= 2.1.0, <= 3.3.2\n\nUsers of v3 and v2 will have to take manual action. If users can't upgrade, they may be able to work around this as long as the project doesn't require support for custom XML entities, though it's not a simple flag.\n\nParse the DOCTYPE directly and check for the presence of custom entities. If entities are present, throw/escape before passing them to SVGO.\n\n```diff\n+ import SAX from 'sax';\n import { optimize } from 'svgo';\n\n- const original =`\n+ let original = `\n \n \n \n \n \n \n \n \n \n \n \n \n ]>\n &lol9;\n `;\n\n+ const parser = SAX.parser();\n+ /** @param {string} doctype */\n+ parser.ondoctype = (doctype) => {\n+ original = original.replace(doctype, '');\n+ }\n+ parser.write(original);\n\n optimize(original);\n```\n\n### Resources\n\n* [Wikipedia: Billion laughs attack](https://en.wikipedia.org/wiki/Billion_laughs_attack)",
"title": "github - https://github.com/advisories/GHSA-xpqw-6gx7-v673"
},
{
"category": "description",
"text": "### Summary\n\nSVGO accepts XML with custom entities, without guards against entity expansion or recursion. This can result in a small XML file (811 bytes) stalling the application and even crashing the Node.js process with `JavaScript heap out of memory`.\n\n### Details\n\nThe upstream XML parser ([sax](https://www.npmjs.com/package/sax)) doesn't interpret custom XML entities by default. We pattern matched custom XML entities from the `DOCTYPE`, inserting them into `parser.ENTITIES`, and enabled `unparsedEntities`. This gives us the desired behavior of supporting SVGs with entities declared in the `DOCTYPE`.\n\nHowever, entities can reference other entities, which can enable small SVGs to explode exponentially when we try to parse them.\n\n#### Proof of Concept\n\n```js\nimport { optimize } from 'svgo';\n\n/** Presume that this string was obtained in some other way, such as network. */\nconst original = `\n \n \n \n \n \n \n \n \n \n \n \n \n ]>\n &lol9;\n`;\n\noptimize(original);\n```\n\n### Impact\n\nIf SVGO is run on untrusted input (i.e., user uploaded to server-side application), then the untrusted SVG can effectively stall or crash the application with an SVG < 1 KB in size.\n\nIt's unlikely to impact users who just use SVGO locally on their own SVGs or in build pipelines.\n\n### Patches\n\nSVGO has patched v4.0.1, v3.3.3, and v2.8.1! However, it's strongly recommended to upgrade to v4 regardless, as previous versions are not officially supported anymore.\n\n### Workarounds\n\n#### == 4.0.0\n\nFor v4, users do not specifically have to upgrade SVGO, though it is recommended to do so. A package manager can be used to upgrade sax recursively:\n\nFor example:\n\n```sh\nyarn up -R sax\n```\n\nNew options were introduced upstream which makes the way SVGO parses SVGs safe by default.\n\n#### >= 2.1.0, <= 3.3.2\n\nUsers of v3 and v2 will have to take manual action. If users can't upgrade, they may be able to work around this as long as the project doesn't require support for custom XML entities, though it's not a simple flag.\n\nParse the DOCTYPE directly and check for the presence of custom entities. If entities are present, throw/escape before passing them to SVGO.\n\n```diff\n+ import SAX from 'sax';\n import { optimize } from 'svgo';\n\n- const original =`\n+ let original = `\n \n \n \n \n \n \n \n \n \n \n \n \n ]>\n &lol9;\n `;\n\n+ const parser = SAX.parser();\n+ /** @param {string} doctype */\n+ parser.ondoctype = (doctype) => {\n+ original = original.replace(doctype, '');\n+ }\n+ parser.write(original);\n\n optimize(original);\n```\n\n### Resources\n\n* [Wikipedia: Billion laughs attack](https://en.wikipedia.org/wiki/Billion_laughs_attack)",
"title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/npm%2FGHSA-xpqw-6gx7-v673.json?alt=media"
},
{
"category": "description",
"text": "SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 2.1.0 to before version 2.8.1, from version 3.0.0 to before version 3.3.3, and before version 4.0.1, SVGO accepts XML with custom entities, without guards against entity expansion or recursion. This can result in a small XML file (811 bytes) stalling the application and even crashing the Node.js process with JavaScript heap out of memory. This issue has been patched in versions 2.8.1, 3.3.3, and 4.0.1.",
"title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "description",
"text": "SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 2.1.0 to before version 2.8.1, from version 3.0.0 to before version 3.3.3, and before version 4.0.1, SVGO accepts XML with custom entities, without guards against entity expansion or recursion. This can result in a small XML file (811 bytes) stalling the application and even crashing the Node.js process with JavaScript heap out of memory. This issue has been patched in versions 2.8.1, 3.3.3, and 4.0.1.",
"title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:5807.json"
},
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:6277.json"
},
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:6309.json"
},
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:6404.json"
},
{
"category": "other",
"text": "0.00055",
"title": "EPSS"
},
{
"category": "other",
"text": "4.7",
"title": "NCSC Score"
},
{
"category": "other",
"text": "There is product data available from source Certbundde, VENDOR FIX as product remediation category",
"title": "NCSC Score top increasing factors"
},
{
"category": "other",
"text": "Is related to (a version of) product Amazon Linux, There is exploit data available from source Nvd",
"title": "NCSC Score top decreasing factors"
}
],
"product_status": {
"fixed": [
"CSAFPID-5912787",
"CSAFPID-5969819",
"CSAFPID-5973080"
],
"known_affected": [
"CSAFPID-5759786",
"CSAFPID-5759787",
"CSAFPID-5759788",
"CSAFPID-5759789",
"CSAFPID-5776954",
"CSAFPID-5776955",
"CSAFPID-5776956",
"CSAFPID-1384077",
"CSAFPID-5354794",
"CSAFPID-1317174",
"CSAFPID-1317175",
"CSAFPID-1330296"
],
"known_not_affected": [
"CSAFPID-5912785",
"CSAFPID-5912786",
"CSAFPID-5912788",
"CSAFPID-5912789",
"CSAFPID-5912790",
"CSAFPID-5912791",
"CSAFPID-5912792",
"CSAFPID-5912793",
"CSAFPID-5912794",
"CSAFPID-5912795",
"CSAFPID-5912796",
"CSAFPID-5912797",
"CSAFPID-5912798",
"CSAFPID-5912799",
"CSAFPID-5912800",
"CSAFPID-5912801",
"CSAFPID-5912802",
"CSAFPID-5912803",
"CSAFPID-5912804",
"CSAFPID-5912805",
"CSAFPID-5912806",
"CSAFPID-5912807",
"CSAFPID-5912808",
"CSAFPID-5912809",
"CSAFPID-5912810",
"CSAFPID-5912811",
"CSAFPID-5969781",
"CSAFPID-5969782",
"CSAFPID-5969783",
"CSAFPID-5969784",
"CSAFPID-5969785",
"CSAFPID-5969786",
"CSAFPID-5969787",
"CSAFPID-5969788",
"CSAFPID-5969789",
"CSAFPID-5969790",
"CSAFPID-5969791",
"CSAFPID-5969792",
"CSAFPID-5969793",
"CSAFPID-5969794",
"CSAFPID-5969795",
"CSAFPID-5969796",
"CSAFPID-5969797",
"CSAFPID-5969798",
"CSAFPID-5969799",
"CSAFPID-5969800",
"CSAFPID-5969801",
"CSAFPID-5969802",
"CSAFPID-5969803",
"CSAFPID-5969804",
"CSAFPID-5969805",
"CSAFPID-5969806",
"CSAFPID-5969807",
"CSAFPID-5969808",
"CSAFPID-5969809",
"CSAFPID-5969810",
"CSAFPID-5969811",
"CSAFPID-5969812",
"CSAFPID-5969813",
"CSAFPID-5969814",
"CSAFPID-5969815",
"CSAFPID-5969816",
"CSAFPID-5969817",
"CSAFPID-5969818",
"CSAFPID-5969820",
"CSAFPID-5969821",
"CSAFPID-5969822",
"CSAFPID-5969823",
"CSAFPID-5969824",
"CSAFPID-5969825",
"CSAFPID-5969826",
"CSAFPID-5969827",
"CSAFPID-5969828",
"CSAFPID-5969829",
"CSAFPID-5969830",
"CSAFPID-5969831",
"CSAFPID-5969832",
"CSAFPID-5969833",
"CSAFPID-5969834",
"CSAFPID-5969835",
"CSAFPID-5969836",
"CSAFPID-5969837",
"CSAFPID-5969838",
"CSAFPID-5969839",
"CSAFPID-5969840",
"CSAFPID-5969841",
"CSAFPID-5969842",
"CSAFPID-5973065",
"CSAFPID-5973066",
"CSAFPID-5973067",
"CSAFPID-5973068",
"CSAFPID-5973069",
"CSAFPID-5973070",
"CSAFPID-5973071",
"CSAFPID-5973072",
"CSAFPID-5973073",
"CSAFPID-5973074",
"CSAFPID-5973075",
"CSAFPID-5973076",
"CSAFPID-5973077",
"CSAFPID-5973078",
"CSAFPID-5973079",
"CSAFPID-5973081",
"CSAFPID-5973082",
"CSAFPID-5973083",
"CSAFPID-5973084",
"CSAFPID-5973085",
"CSAFPID-5973086",
"CSAFPID-5973087",
"CSAFPID-5973088",
"CSAFPID-5973089",
"CSAFPID-5973090",
"CSAFPID-5973091",
"CSAFPID-5973092",
"CSAFPID-5984227"
]
},
"references": [
{
"category": "external",
"summary": "Source - github",
"url": "https://github.com/advisories/GHSA-xpqw-6gx7-v673"
},
{
"category": "external",
"summary": "Source raw - github",
"url": "https://api.github.com/advisories/GHSA-xpqw-6gx7-v673"
},
{
"category": "external",
"summary": "Source - osv",
"url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/npm%2FGHSA-xpqw-6gx7-v673.json?alt=media"
},
{
"category": "external",
"summary": "Source - cveprojectv5",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "Source raw - cveprojectv5",
"url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/29xxx/CVE-2026-29074.json"
},
{
"category": "external",
"summary": "Source - nvd",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "Source raw - nvd",
"url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-29074"
},
{
"category": "external",
"summary": "Source - first",
"url": "https://api.first.org/data/v1/epss?cve=CVE-2026-29074"
},
{
"category": "external",
"summary": "Source raw - first",
"url": "https://api.first.org/data/v1/epss?limit=10000&offset=0"
},
{
"category": "external",
"summary": "Source - first",
"url": "https://api.first.org/data/v1/epss?limit=10000&offset=0"
},
{
"category": "external",
"summary": "Source - redhat",
"url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:5807.json"
},
{
"category": "external",
"summary": "Source - redhat",
"url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:6277.json"
},
{
"category": "external",
"summary": "Source - certbundde",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0935.json"
},
{
"category": "external",
"summary": "Source - redhat",
"url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:6309.json"
},
{
"category": "external",
"summary": "Source - redhat",
"url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:6404.json"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; github; nvd; osv; redhat",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
},
{
"category": "external",
"summary": "Reference - github",
"url": "https://github.com/advisories/GHSA-xpqw-6gx7-v673"
},
{
"category": "external",
"summary": "Reference - github; osv; redhat",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/errata/RHSA-2026:5807"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2024-25621"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2025-12060"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2025-12638"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2025-6193"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2025-66626"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2025-68156"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2025-69873"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2026-1526"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2026-1528"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2026-2229"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2026-25223"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2026-25639"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2026-32141"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://docs.redhat.com/en/documentation/red_hat_openshift_ai/"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5807.json"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/errata/RHSA-2026:6277"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/html/release_notes/patch_releases"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2438237"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439070"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439170"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442922"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6277.json"
},
{
"category": "external",
"summary": "Reference - certbundde",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0935.json"
},
{
"category": "external",
"summary": "Reference - certbundde",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0935"
},
{
"category": "external",
"summary": "Reference - certbundde",
"url": "https://access.redhat.com/errata/RHSA-2026:6308"
},
{
"category": "external",
"summary": "Reference - certbundde; redhat",
"url": "https://access.redhat.com/errata/RHSA-2026:6309"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2026-26007"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2026-1615"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2026-28498"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2026-28802"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2026-30827"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://access.redhat.com/security/cve/CVE-2026-25990"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6309.json"
},
{
"category": "external",
"summary": "Reference - certbundde; redhat",
"url": "https://access.redhat.com/errata/RHSA-2026:6404"
},
{
"category": "external",
"summary": "Reference - certbundde",
"url": "https://access.redhat.com/errata/RHSA-2026:6278"
},
{
"category": "external",
"summary": "Reference - certbundde",
"url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3215.html"
},
{
"category": "external",
"summary": "Reference - certbundde",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025088.html"
},
{
"category": "external",
"summary": "Reference - redhat",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6404.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "For Red Hat OpenShift AI 2.16.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/",
"product_ids": [
"CSAFPID-2576489",
"CSAFPID-5912787"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5807"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"CSAFPID-2576489",
"CSAFPID-5912785",
"CSAFPID-5912786",
"CSAFPID-5912787",
"CSAFPID-5912788",
"CSAFPID-5912789",
"CSAFPID-5912790",
"CSAFPID-5912791",
"CSAFPID-5912792",
"CSAFPID-5912793",
"CSAFPID-5912794",
"CSAFPID-5912795",
"CSAFPID-5912796",
"CSAFPID-5912797",
"CSAFPID-5912798",
"CSAFPID-5912799",
"CSAFPID-5912800",
"CSAFPID-5912801",
"CSAFPID-5912802",
"CSAFPID-5912803",
"CSAFPID-5912804",
"CSAFPID-5912805",
"CSAFPID-5912806",
"CSAFPID-5912807",
"CSAFPID-5912808",
"CSAFPID-5912809",
"CSAFPID-5912810",
"CSAFPID-5912811",
"CSAFPID-5153905",
"CSAFPID-5256303",
"CSAFPID-5969781",
"CSAFPID-5969782",
"CSAFPID-5969783",
"CSAFPID-5969784",
"CSAFPID-5969785",
"CSAFPID-5969786",
"CSAFPID-5969787",
"CSAFPID-5969788",
"CSAFPID-5969789",
"CSAFPID-5969790",
"CSAFPID-5969791",
"CSAFPID-5969792",
"CSAFPID-5969793",
"CSAFPID-5969794",
"CSAFPID-5969795",
"CSAFPID-5969796",
"CSAFPID-5969797",
"CSAFPID-5969798",
"CSAFPID-5969799",
"CSAFPID-5969800",
"CSAFPID-5969801",
"CSAFPID-5969802",
"CSAFPID-5969803",
"CSAFPID-5969804",
"CSAFPID-5969805",
"CSAFPID-5969806",
"CSAFPID-5969807",
"CSAFPID-5969808",
"CSAFPID-5969809",
"CSAFPID-5969810",
"CSAFPID-5969811",
"CSAFPID-5969812",
"CSAFPID-5969813",
"CSAFPID-5969814",
"CSAFPID-5969815",
"CSAFPID-5969816",
"CSAFPID-5969817",
"CSAFPID-5969818",
"CSAFPID-5969819",
"CSAFPID-5969820",
"CSAFPID-5969821",
"CSAFPID-5969822",
"CSAFPID-5969823",
"CSAFPID-5969824",
"CSAFPID-5969825",
"CSAFPID-5969826",
"CSAFPID-5969827",
"CSAFPID-5969828",
"CSAFPID-5969829",
"CSAFPID-5969830",
"CSAFPID-5969831",
"CSAFPID-5969832",
"CSAFPID-5969833",
"CSAFPID-5969834",
"CSAFPID-5969835",
"CSAFPID-5969836",
"CSAFPID-5969837",
"CSAFPID-5969838",
"CSAFPID-5969839",
"CSAFPID-5969840",
"CSAFPID-5969841",
"CSAFPID-5969842",
"CSAFPID-5153949",
"CSAFPID-5973065",
"CSAFPID-5973066",
"CSAFPID-5973067",
"CSAFPID-5973068",
"CSAFPID-5973069",
"CSAFPID-5973070",
"CSAFPID-5973071",
"CSAFPID-5973072",
"CSAFPID-5973073",
"CSAFPID-5973074",
"CSAFPID-5973075",
"CSAFPID-5973076",
"CSAFPID-5973077",
"CSAFPID-5973078",
"CSAFPID-5973079",
"CSAFPID-5973080",
"CSAFPID-5973081",
"CSAFPID-5973082",
"CSAFPID-5973083",
"CSAFPID-5973084",
"CSAFPID-5973085",
"CSAFPID-5973086",
"CSAFPID-5973087",
"CSAFPID-5973088",
"CSAFPID-5973089",
"CSAFPID-5973090",
"CSAFPID-5973091",
"CSAFPID-5973092",
"CSAFPID-5984227"
]
},
{
"category": "vendor_fix",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"CSAFPID-5969819"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6277"
},
{
"category": "vendor_fix",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade",
"product_ids": [
"CSAFPID-5153949",
"CSAFPID-5973080"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6309"
},
{
"category": "vendor_fix",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade",
"product_ids": [
"CSAFPID-5153949",
"CSAFPID-5973080"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:6404"
}
],
"scores": [
{
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH"
},
"products": [
"CSAFPID-1317174",
"CSAFPID-1317175",
"CSAFPID-1330296",
"CSAFPID-1384077",
"CSAFPID-5354794",
"CSAFPID-5759786",
"CSAFPID-5759787",
"CSAFPID-5759788",
"CSAFPID-5759789",
"CSAFPID-5776954",
"CSAFPID-5776955",
"CSAFPID-5776956"
]
}
],
"title": "CVE-2026-29074"
}
]
}