{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-45292", "tracking": { "current_release_date": "2026-08-25T13:40:09.105555Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-45292", "initial_release_date": "2026-05-14T16:42:26.529280Z", "revision_history": [ { "date": "2026-05-14T16:42:26.529280Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (5).| CWES updated (1)." }, { "date": "2026-05-14T16:42:36.032065Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-05-14T18:16:11.472097Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (194).| Product Identifiers created (192).| References created (4).| CWES updated (1)." }, { "date": "2026-05-14T18:16:28.848401Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-05-28T17:27:31.620764Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (4).| CWES updated (1)." }, { "date": "2026-05-28T17:27:34.451329Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-05-28T18:03:01.602971Z", "number": "7", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (3).| References created (4).| CWES updated (1)." }, { "date": "2026-05-28T18:03:04.476546Z", "number": "8", "summary": "NCSC Score updated." }, { "date": "2026-05-28T18:52:15.925288Z", "number": "9", "summary": "Unknown change." }, { "date": "2026-05-29T15:10:10.571650Z", "number": "10", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-05-29T15:10:19.456944Z", "number": "11", "summary": "NCSC Score updated." }, { "date": "2026-06-03T00:27:52.981514Z", "number": "12", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (77).| Product Identifiers created (15).| Products created (3).| References created (6).| CWES updated (1).| Vendor_assessment created." }, { "date": "2026-06-03T00:28:01.084781Z", "number": "13", "summary": "NCSC Score updated." }, { "date": "2026-06-09T06:15:38.443147Z", "number": "14", "summary": "References created (1)." }, { "date": "2026-06-15T16:01:19.235654Z", "number": "15", "summary": "EPSS updated." }, { "date": "2026-06-15T16:01:21.102770Z", "number": "16", "summary": "NCSC Score updated." }, { "date": "2026-06-24T12:28:31.581552Z", "number": "17", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| Product Remediations created (2).| Product Identifiers created (2).| Product Identifiers removed (2).| References created (17).| CWES updated (1)." }, { "date": "2026-06-24T12:28:40.451143Z", "number": "18", "summary": "NCSC Score updated." }, { "date": "2026-06-30T03:49:20.136516Z", "number": "19", "summary": "References created (4)." }, { "date": "2026-06-30T03:49:25.532865Z", "number": "20", "summary": "NCSC Score updated." }, { "date": "2026-06-30T04:10:46.594421Z", "number": "21", "summary": "References created (4)." }, { "date": "2026-06-30T16:10:39.506426Z", "number": "22", "summary": "EPSS updated." }, { "date": "2026-06-30T16:10:51.250079Z", "number": "23", "summary": "NCSC Score updated." }, { "date": "2026-07-08T12:05:37.915453Z", "number": "24", "summary": "Source connected.| CVE status created. (valid)| Products connected (5).| References created (3)." }, { "date": "2026-07-08T12:05:46.937738Z", "number": "25", "summary": "NCSC Score updated." }, { "date": "2026-07-09T01:04:27.522578Z", "number": "26", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (18).| Product Remediations created (3).| Product Identifiers created (64).| Product Identifiers removed (64).| References created (42).| CWES updated (1)." }, { "date": "2026-07-09T12:40:16.468804Z", "number": "27", "summary": "References created (1)." }, { "date": "2026-07-09T12:40:20.442329Z", "number": "28", "summary": "NCSC Score updated." }, { "date": "2026-07-09T13:29:04.738297Z", "number": "29", "summary": "References created (1)." }, { "date": "2026-07-10T07:27:52.500105Z", "number": "30", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (23).| References created (11).| CWES updated (1)." }, { "date": "2026-07-10T07:27:59.025646Z", "number": "31", "summary": "NCSC Score updated." }, { "date": "2026-07-10T17:02:46.396381Z", "number": "32", "summary": "EPSS updated." }, { "date": "2026-07-10T17:02:51.489335Z", "number": "33", "summary": "NCSC Score updated." }, { "date": "2026-07-15T02:19:17.233352Z", "number": "34", "summary": "Products connected (3).| Product Identifiers created (3)." }, { "date": "2026-07-15T02:19:21.793885Z", "number": "35", "summary": "NCSC Score updated." }, { "date": "2026-07-17T10:40:10.133645Z", "number": "36", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-07-17T10:40:13.285304Z", "number": "37", "summary": "NCSC Score updated." }, { "date": "2026-07-20T12:40:53.526725Z", "number": "38", "summary": "Products created (1).| Product Identifiers created (1).| Products removed (1)." }, { "date": "2026-07-20T12:40:59.012540Z", "number": "39", "summary": "NCSC Score updated." }, { "date": "2026-07-21T00:28:13.988655Z", "number": "40", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| Product Remediations created (1).| References created (48).| CWES updated (1)." }, { "date": "2026-07-21T00:28:15.852443Z", "number": "41", "summary": "NCSC Score updated." }, { "date": "2026-07-21T12:31:11.441233Z", "number": "42", "summary": "References created (1)." }, { "date": "2026-07-21T12:31:41.493244Z", "number": "43", "summary": "NCSC Score updated." }, { "date": "2026-07-21T12:40:50.692474Z", "number": "44", "summary": "Products created (1).| Product Identifiers created (2).| Products connected (1).| Products removed (1).| References created (1)." }, { "date": "2026-07-22T06:55:04.404949Z", "number": "45", "summary": "References created (1)." }, { "date": "2026-07-22T06:55:14.612597Z", "number": "46", "summary": "NCSC Score updated." }, { "date": "2026-07-22T12:28:45.147528Z", "number": "47", "summary": "References created (1)." }, { "date": "2026-07-22T12:28:50.040516Z", "number": "48", "summary": "NCSC Score updated." }, { "date": "2026-07-22T12:59:43.688155Z", "number": "49", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (15).| Product Remediations created (2).| Product Identifiers created (26).| Product Identifiers removed (26).| References created (42).| CWES updated (1)." }, { "date": "2026-07-23T06:12:36.412861Z", "number": "50", "summary": "References created (1)." }, { "date": "2026-07-23T13:26:31.067524Z", "number": "51", "summary": "Products created (1).| Product Identifiers created (2).| Products connected (1).| Products removed (1).| References created (1)." }, { "date": "2026-07-24T14:13:41.910688Z", "number": "52", "summary": "EPSS updated." }, { "date": "2026-07-24T14:13:48.845805Z", "number": "53", "summary": "NCSC Score updated." }, { "date": "2026-08-04T21:27:26.154705Z", "number": "54", "summary": "Products created (1)." }, { "date": "2026-08-04T21:27:33.674814Z", "number": "55", "summary": "NCSC Score updated." }, { "date": "2026-08-05T12:47:43.002556Z", "number": "56", "summary": "Products connected (1).| Product Identifiers created (1).| Products removed (1)." }, { "date": "2026-08-05T12:47:46.483455Z", "number": "57", "summary": "NCSC Score updated." }, { "date": "2026-08-08T03:15:30.663848Z", "number": "58", "summary": "Products removed (1)." }, { "date": "2026-08-08T03:15:39.912880Z", "number": "59", "summary": "NCSC Score updated." }, { "date": "2026-08-10T12:46:11.236396Z", "number": "60", "summary": "Products connected (1).| Products removed (1)." }, { "date": "2026-08-10T12:46:22.319234Z", "number": "61", "summary": "NCSC Score updated." }, { "date": "2026-08-12T06:12:34.352458Z", "number": "62", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-08-12T06:12:36.375229Z", "number": "63", "summary": "NCSC Score updated." }, { "date": "2026-08-13T12:15:13.121903Z", "number": "64", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-08-13T12:15:15.593543Z", "number": "65", "summary": "NCSC Score updated." }, { "date": "2026-08-14T12:39:13.645011Z", "number": "66", "summary": "Products connected (1).| Product Identifiers created (1).| Products removed (1)." }, { "date": "2026-08-14T12:39:16.180784Z", "number": "67", "summary": "NCSC Score updated." }, { "date": "2026-08-17T08:29:02.399161Z", "number": "68", "summary": "NCSC Score updated." }, { "date": "2026-08-17T12:41:19.326380Z", "number": "69", "summary": "Products connected (1).| Products removed (1)." }, { "date": "2026-08-19T11:13:29.872477Z", "number": "70", "summary": "Source connected.| CVE status created. (valid)| Products connected (1).| References created (3)." }, { "date": "2026-08-19T11:13:31.482234Z", "number": "71", "summary": "NCSC Score updated." }, { "date": "2026-08-19T15:42:32.725828Z", "number": "72", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-08-19T15:45:37.603489Z", "number": "73", "summary": "NCSC Score updated." }, { "date": "2026-08-21T12:41:24.512203Z", "number": "74", "summary": "Products connected (1).| Product Identifiers created (1).| Products removed (1)." }, { "date": "2026-08-21T12:41:27.981510Z", "number": "75", "summary": "NCSC Score updated." }, { "date": "2026-08-24T12:41:33.920475Z", "number": "76", "summary": "Products connected (1).| Products removed (1)." }, { "date": "2026-08-24T12:41:39.655253Z", "number": "77", "summary": "NCSC Score updated." }, { "date": "2026-08-25T06:05:48.557379Z", "number": "78", "summary": "Products connected (2).| References created (5)." }, { "date": "2026-08-25T06:05:51.477500Z", "number": "79", "summary": "NCSC Score updated." }, { "date": "2026-08-25T13:39:58.530662Z", "number": "80", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-08-25T13:40:01.511239Z", "number": "81", "summary": "NCSC Score updated." } ], "status": "interim", "version": "81" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/keycloak", "product": { "name": "vers:unknown/keycloak", "product_id": "CSAFPID-5187459", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:keycloak" } } } ], "category": "product_name", "name": "Enterprise Linux" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/0", "product": { "name": "vers:rpm/0", "product_id": "CSAFPID-6982270", "product_identification_helper": { "cpe": "cpe:/a:redhat:exploit_intelligence:0" } } } ], "category": "product_name", "name": "Exploit Intelligence" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-5222660", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhmt:1" } } } ], "category": "product_name", "name": "Migration Toolkit For Containers" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-4994901", "product_identification_helper": { "cpe": "cpe:/a:redhat:migration_toolkit_applications:8" } } } ], "category": "product_name", "name": "Migration Toolkit for Applications 8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2524222", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_lightspeed" } } } ], "category": "product_name", "name": "OpenShift Lightspeed" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-1441076", "product_identification_helper": { "cpe": "cpe:/a:redhat:serverless:1" } } } ], "category": "product_name", "name": "OpenShift Serverless" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-1439310", "product_identification_helper": { "cpe": "cpe:/a:redhat:red_hat_3scale_amp:2" } } } ], "category": "product_name", "name": "Red Hat 3scale API Management Platform 2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-2858641", "product_identification_helper": { "cpe": "cpe:/a:redhat:ai_inference_server:3" } } } ], "category": "product_name", "name": "Red Hat AI Inference Server" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-1508257", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2" } } } ], "category": "product_name", "name": "Red Hat Ansible Automation Platform 2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-1439292", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_data_grid:8" } } } ], "category": "product_name", "name": "Red Hat Data Grid 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-8868641", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_data_grid:8" } } } ], "category": "product_name", "name": "Red Hat Data Grid 8.6.2" } ], "category": "product_family", "name": "Red Hat JBoss Data Grid" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/trace-propagators|<*", "product": { "name": "vers:rpm/trace-propagators|<*", "product_id": "CSAFPID-8870944", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_data_grid:8" } } } ], "category": "product_name", "name": "Red Hat Data Grid 8.6.2" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317175", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-5198605", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux_ai:3" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux AI (RHEL AI) 3" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1439304", "product_identification_helper": { "cpe": "cpe:/a:redhat:jbosseapxp" } } } ], "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8.2", "product": { "name": "vers:rpm/8.2", "product_id": "CSAFPID-8879319", "product_identification_helper": { "cpe": "cpe:/a:redhat:migration_toolkit_applications:8.2::el9" } } } ], "category": "product_name", "name": "Red Hat Migration Toolkit for Applications 8.2" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1784163267", "product": { "name": "vers:oci/1784163267", "product_id": "CSAFPID-8879321", "product_identification_helper": { "purl": "pkg:oci/mta-analyzer-addon-rhel9@sha256%3A907c0c8c40c1fb494caa5feac439b90754160bf3f79d8e76cf2dded63f549db6?arch=arm64&repository_url=registry.redhat.io/mta/mta-analyzer-addon-rhel9&tag=1784163267" } } } ], "category": "product_name", "name": "mta-analyzer-addon-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1784211378", "product": { "name": "vers:oci/1784211378", "product_id": "CSAFPID-8879322", "product_identification_helper": { "purl": "pkg:oci/mta-cli-rhel9@sha256%3Aecae0c1053637d609a19773757c0ea8b336b645950a42473015daabfe9677fab?arch=arm64&repository_url=registry.redhat.io/mta/mta-cli-rhel9&tag=1784211378" } } } ], "category": "product_name", "name": "mta-cli-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1784056873", "product": { "name": "vers:oci/1784056873", "product_id": "CSAFPID-8879323", "product_identification_helper": { "purl": "pkg:oci/mta-discovery-addon-rhel9@sha256%3Aa72cbf7b2ba6420e31ecca15f7d3628a671dd642a6ccf4610c5a26462a5d4b36?arch=amd64&repository_url=registry.redhat.io/mta/mta-discovery-addon-rhel9&tag=1784056873" } } } ], "category": "product_name", "name": "mta-discovery-addon-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1784056823", "product": { "name": "vers:oci/1784056823", "product_id": "CSAFPID-8879324", "product_identification_helper": { "purl": "pkg:oci/mta-dotnet-external-provider-rhel9@sha256%3Ab5d66f8d4c6d6680886e631296c927c9502817fbb823a680f1dabf1cc92e0465?arch=arm64&repository_url=registry.redhat.io/mta/mta-dotnet-external-provider-rhel9&tag=1784056823" } } } ], "category": "product_name", "name": "mta-dotnet-external-provider-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1784162259", "product": { "name": "vers:oci/1784162259", "product_id": "CSAFPID-8879325", "product_identification_helper": { "purl": "pkg:oci/mta-go-external-provider-rhel9@sha256%3A8f91d460985e1a97ac6892d26c0517f39871d94d1b3bfad005d58d424bed2b0b?arch=arm64&repository_url=registry.redhat.io/mta/mta-go-external-provider-rhel9&tag=1784162259" } } } ], "category": "product_name", "name": "mta-go-external-provider-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1784059743", "product": { "name": "vers:oci/1784059743", "product_id": "CSAFPID-8879326", "product_identification_helper": { "purl": "pkg:oci/mta-hub-rhel9@sha256%3A2e251b0343327f2ac6e60d2888da526be6a82a355310f1aea93011426cddc485?arch=amd64&repository_url=registry.redhat.io/mta/mta-hub-rhel9&tag=1784059743" } } } ], "category": "product_name", "name": "mta-hub-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1784210217", "product": { "name": "vers:oci/1784210217", "product_id": "CSAFPID-8879327", "product_identification_helper": { "purl": "pkg:oci/mta-java-external-provider-rhel9@sha256%3Ae8bd699e851fbab4466d1d25e3a08e2bcf8997978cb7f19f509c627be42d03dd?arch=amd64&repository_url=registry.redhat.io/mta/mta-java-external-provider-rhel9&tag=1784210217" } } } ], "category": "product_name", "name": "mta-java-external-provider-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1784162266", "product": { "name": "vers:oci/1784162266", "product_id": "CSAFPID-8879328", "product_identification_helper": { "purl": "pkg:oci/mta-nodejs-external-provider-rhel9@sha256%3Aa89c4d19ff39a406f3279b4ffd6f8d2a2a82a78ab3e9aa1dc0f2c385a24fa844?arch=arm64&repository_url=registry.redhat.io/mta/mta-nodejs-external-provider-rhel9&tag=1784162266" } } } ], "category": "product_name", "name": "mta-nodejs-external-provider-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1784220119", "product": { "name": "vers:oci/1784220119", "product_id": "CSAFPID-8879329", "product_identification_helper": { "purl": "pkg:oci/mta-operator-bundle@sha256%3A94f88bf557a036c54b348c2689c699a720d5d347b1bba141feec273e624ccdbf?arch=amd64&repository_url=registry.redhat.io/mta/mta-operator-bundle&tag=1784220119" } } } ], "category": "product_name", "name": "mta-operator-bundle" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1784059659", "product": { "name": "vers:oci/1784059659", "product_id": "CSAFPID-8879330", "product_identification_helper": { "purl": "pkg:oci/mta-platform-addon-rhel9@sha256%3Af421044ff3d6911097aebcbabfac87ddad74987e0e5f18a96dd89454f46a4cdf?arch=amd64&repository_url=registry.redhat.io/mta/mta-platform-addon-rhel9&tag=1784059659" } } } ], "category": "product_name", "name": "mta-platform-addon-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1784162359", "product": { "name": "vers:oci/1784162359", "product_id": "CSAFPID-8879332", "product_identification_helper": { "purl": "pkg:oci/mta-python-external-provider-rhel9@sha256%3A4f46867f5ff78e9e970bc572a1a625080ae8faea29dc098d3d7d4355e8350ca1?arch=amd64&repository_url=registry.redhat.io/mta/mta-python-external-provider-rhel9&tag=1784162359" } } } ], "category": "product_name", "name": "mta-python-external-provider-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1784219586", "product": { "name": "vers:oci/1784219586", "product_id": "CSAFPID-8879333", "product_identification_helper": { "purl": "pkg:oci/mta-rhel9-operator@sha256%3A957a553608cbf9ed108c22f851ef809ed348cf592610851c3a554f3342ba511a?arch=arm64&repository_url=registry.redhat.io/mta/mta-rhel9-operator&tag=1784219586" } } } ], "category": "product_name", "name": "mta-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1784109883", "product": { "name": "vers:oci/1784109883", "product_id": "CSAFPID-8879320", "product_identification_helper": { "purl": "pkg:oci/mta-solution-server-rhel9@sha256%3Af8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e?arch=arm64&repository_url=registry.redhat.io/mta/mta-solution-server-rhel9&tag=1784109883" } } } ], "category": "product_name", "name": "mta-solution-server-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1783962515", "product": { "name": "vers:oci/1783962515", "product_id": "CSAFPID-8879334", "product_identification_helper": { "purl": "pkg:oci/mta-ui-rhel9@sha256%3Af59dcacb1eed9bcd539bc6c26a630115cf35378d77075247fb42219836e2adb7?arch=arm64&repository_url=registry.redhat.io/mta/mta-ui-rhel9&tag=1783962515" } } } ], "category": "product_name", "name": "mta-ui-rhel9" } ], "category": "product_family", "name": "Red Hat Migration Toolkit for Applications" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1784109883|<*", "product": { "name": "vers:rpm/1784109883|<*", "product_id": "CSAFPID-8884943", "product_identification_helper": { "cpe": "cpe:/a:redhat:migration_toolkit_applications:8.2::el9" } } } ], "category": "product_name", "name": "Red Hat Migration Toolkit for Applications 8.2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.2", "product": { "name": "vers:rpm/1.2", "product_id": "CSAFPID-8491882", "product_identification_helper": { "cpe": "cpe:/a:redhat:offline_knowledge_portal:1.2::el9" } } } ], "category": "product_name", "name": "Red Hat Offline Knowledge Portal 1.2.5" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782239370", "product": { "name": "vers:oci/1782239370", "product_id": "CSAFPID-8491883", "product_identification_helper": { "purl": "pkg:oci/rhokp-rhel9@sha256%3Ac0b2c8c0cf4ff8340aef1ce4e92fbf0dee4fc0b88a0c17659ad018f2fc21513a?arch=amd64&repository_url=registry.redhat.io/offline-knowledge-portal/rhokp-rhel9&tag=1782239370" } } } ], "category": "product_name", "name": "rhokp-rhel9" } ], "category": "product_family", "name": "Red Hat Offline Knowledge Portal" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1782239370|<*", "product": { "name": "vers:rpm/1782239370|<*", "product_id": "CSAFPID-8884911", "product_identification_helper": { "cpe": "cpe:/a:redhat:offline_knowledge_portal:1.2::el9" } } } ], "category": "product_name", "name": "Red Hat Offline Knowledge Portal 1.2.9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1439279", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_ai" } } } ], "category": "product_name", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-1441150", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_devspaces:3" } } } ], "category": "product_name", "name": "Red Hat OpenShift Dev Spaces" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3.29", "product": { "name": "vers:rpm/3.29", "product_id": "CSAFPID-8578586", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_devspaces:3.29::el9" } } } ], "category": "product_name", "name": "Red Hat OpenShift Dev Spaces 3.29" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782498475", "product": { "name": "vers:oci/1782498475", "product_id": "CSAFPID-8578590", "product_identification_helper": { "purl": "pkg:oci/code-rhel9@sha256%3Ae1019c30e1d84e66d775d0d6fc7d051803dcbe44823fb2a1914807be39c79dae?arch=ppc64le&repository_url=registry.redhat.io/devspaces/code-rhel9&tag=1782498475" } } } ], "category": "product_name", "name": "code-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782497670", "product": { "name": "vers:oci/1782497670", "product_id": "CSAFPID-8578591", "product_identification_helper": { "purl": "pkg:oci/code-sshd-rhel9@sha256%3Af2a24aa01cbe0d926d4aefe3b12eba21eb5ec7f87276e572a6814c727228624c?arch=arm64&repository_url=registry.redhat.io/devspaces/code-sshd-rhel9&tag=1782497670" } } } ], "category": "product_name", "name": "code-sshd-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782403514", "product": { "name": "vers:oci/1782403514", "product_id": "CSAFPID-8578592", "product_identification_helper": { "purl": "pkg:oci/configbump-rhel9@sha256%3Ab5f1bf30495f6be97c696cf7f90768629cee96f8d106f745bf95fdefddc99592?arch=amd64&repository_url=registry.redhat.io/devspaces/configbump-rhel9&tag=1782403514" } } } ], "category": "product_name", "name": "configbump-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782498792", "product": { "name": "vers:oci/1782498792", "product_id": "CSAFPID-8578587", "product_identification_helper": { "purl": "pkg:oci/dashboard-rhel9@sha256%3A881e405e32821ef10cf992c7a633281c1dc45df721fe909048df1689472000ce?arch=ppc64le&repository_url=registry.redhat.io/devspaces/dashboard-rhel9&tag=1782498792" } } } ], "category": "product_name", "name": "dashboard-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1783094587", "product": { "name": "vers:oci/1783094587", "product_id": "CSAFPID-8578593", "product_identification_helper": { "purl": "pkg:oci/devspaces-operator-bundle@sha256%3A6c85b42ede0f4745ed558bcb03d033c49f56cef17a70c12e5308066124cac6e3?arch=amd64&repository_url=registry.redhat.io/devspaces/devspaces-operator-bundle&tag=1783094587" } } } ], "category": "product_name", "name": "devspaces-operator-bundle" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782403611", "product": { "name": "vers:oci/1782403611", "product_id": "CSAFPID-8578594", "product_identification_helper": { "purl": "pkg:oci/devspaces-rhel9-operator@sha256%3A89bf6a32a0935cacadbc6d23566dce6ca741e404d58c11050638c7b8e868028b?arch=ppc64le&repository_url=registry.redhat.io/devspaces/devspaces-rhel9-operator&tag=1782403611" } } } ], "category": "product_name", "name": "devspaces-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782403262", "product": { "name": "vers:oci/1782403262", "product_id": "CSAFPID-8578595", "product_identification_helper": { "purl": "pkg:oci/imagepuller-rhel9@sha256%3Ab0f15904251c6665961eef9c944d00f17499f7219351fe213fe7935f62fbf7ac?arch=arm64&repository_url=registry.redhat.io/devspaces/imagepuller-rhel9&tag=1782403262" } } } ], "category": "product_name", "name": "imagepuller-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1783093088", "product": { "name": "vers:oci/1783093088", "product_id": "CSAFPID-8578596", "product_identification_helper": { "purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3Abf1d4b2b1ef03e65be59699ce3233a75a34e1777abc182984c7a8efa698a936e?arch=ppc64le&repository_url=registry.redhat.io/devspaces/jetbrains-ide-rhel9&tag=1783093088" } } } ], "category": "product_name", "name": "jetbrains-ide-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782989027", "product": { "name": "vers:oci/1782989027", "product_id": "CSAFPID-8578597", "product_identification_helper": { "purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3Ad55a55a36a23e7deb83718bd5dcc19b083b84d441add72ea7f4e28935e4717e3?arch=ppc64le&repository_url=registry.redhat.io/devspaces/multicluster-redirector-rhel9&tag=1782989027" } } } ], "category": "product_name", "name": "multicluster-redirector-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782487406", "product": { "name": "vers:oci/1782487406", "product_id": "CSAFPID-8578598", "product_identification_helper": { "purl": "pkg:oci/oauth2-proxy-rhel9@sha256%3A9e50b45f81fedab27e896f04b80bacaa01d8370ff5679147f95ad79b61972d83?arch=amd64&repository_url=registry.redhat.io/devspaces/oauth2-proxy-rhel9&tag=1782487406" } } } ], "category": "product_name", "name": "oauth2-proxy-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1783007534", "product": { "name": "vers:oci/1783007534", "product_id": "CSAFPID-8578588", "product_identification_helper": { "purl": "pkg:oci/openvsx-rhel9@sha256%3Ac05020e5ee5bddc62e38493cd16b6e4ffde7c2248a00d710f32b90a6ee12ceeb?arch=amd64&repository_url=registry.redhat.io/devspaces/openvsx-rhel9&tag=1783007534" } } }, { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-4534155" } } ], "category": "product_name", "name": "openvsx-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782989367", "product": { "name": "vers:oci/1782989367", "product_id": "CSAFPID-8578589", "product_identification_helper": { "purl": "pkg:oci/pluginregistry-rhel9@sha256%3Afdc8f64f3b82b200a5e31b01b8612069f1aa897014085c1de755394552a1a70a?arch=amd64&repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9&tag=1782989367" } } }, { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2577689" } } ], "category": "product_name", "name": "pluginregistry-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1783033397", "product": { "name": "vers:oci/1783033397", "product_id": "CSAFPID-8578599", "product_identification_helper": { "purl": "pkg:oci/server-rhel9@sha256%3Afcaf6d60d682cf51866948ea3b4846c2993e2801adb69dc745ffa832318f515c?arch=amd64&repository_url=registry.redhat.io/devspaces/server-rhel9&tag=1783033397" } } } ], "category": "product_name", "name": "server-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782403274", "product": { "name": "vers:oci/1782403274", "product_id": "CSAFPID-8578600", "product_identification_helper": { "purl": "pkg:oci/traefik-rhel9@sha256%3Ac18a1c50a4fc7081c6564d1c4ed4904212b7939a4f1f46afef0a36dc1d76f38e?arch=arm64&repository_url=registry.redhat.io/devspaces/traefik-rhel9&tag=1782403274" } } } ], "category": "product_name", "name": "traefik-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782987430", "product": { "name": "vers:oci/1782987430", "product_id": "CSAFPID-8578601", "product_identification_helper": { "purl": "pkg:oci/udi-base-rhel10@sha256%3Ae99d1d877bd7335736cbaeb4db5b9904369a1d07f6df332c38ad79ff1256b67b?arch=s390x&repository_url=registry.redhat.io/devspaces/udi-base-rhel10&tag=1782987430" } } } ], "category": "product_name", "name": "udi-base-rhel10" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782987705", "product": { "name": "vers:oci/1782987705", "product_id": "CSAFPID-8578602", "product_identification_helper": { "purl": "pkg:oci/udi-base-rhel9@sha256%3Ad086075db52f4476aa64d7e2680baa01e99da246275fa9cae0ba4a74de63c7f3?arch=s390x&repository_url=registry.redhat.io/devspaces/udi-base-rhel9&tag=1782987705" } } } ], "category": "product_name", "name": "udi-base-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782991491", "product": { "name": "vers:oci/1782991491", "product_id": "CSAFPID-8578603", "product_identification_helper": { "purl": "pkg:oci/udi-rhel9@sha256%3Af0079e8ae53d84223aea2d3186e7bc6b525b7c03d307cde50cfb9f1bbc18712b?arch=arm64&repository_url=registry.redhat.io/devspaces/udi-rhel9&tag=1782991491" } } } ], "category": "product_name", "name": "udi-rhel9" } ], "category": "product_family", "name": "Red Hat OpenShift Dev Spaces" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1782989367|<*", "product": { "name": "vers:rpm/1782989367|<*", "product_id": "CSAFPID-8575407", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_devspaces:3.29::el9" } } }, { "category": "product_version_range", "name": "vers:rpm/1783007534|<*", "product": { "name": "vers:rpm/1783007534|<*", "product_id": "CSAFPID-8815748", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_devspaces:3.29::el9" } } } ], "category": "product_name", "name": "Red Hat OpenShift Dev Spaces 3.29" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-1441200", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3" } } } ], "category": "product_name", "name": "Red Hat Quay 3" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/6", "product": { "name": "vers:rpm/6", "product_id": "CSAFPID-1439313", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6" } } } ], "category": "product_name", "name": "Red Hat Satellite 6" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8022614" } } ], "category": "product_name", "name": "agent-client-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-6982271" } } ], "category": "product_name", "name": "vulnerability-analysis-rhel9" } ], "category": "product_family", "name": "Exploit Intelligence" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1508264" } } ], "category": "product_name", "name": "automation-controller" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5172458" } } ], "category": "product_name", "name": "controller-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2698059" } } ], "category": "product_name", "name": "ee-supported-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2518221" } } ], "category": "product_name", "name": "ee-supported-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5172461" } } ], "category": "product_name", "name": "hub-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5035448" } } ], "category": "product_name", "name": "lightspeed-chatbot-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1508262" } } ], "category": "product_name", "name": "platform-resource-runner-rhel8" } ], "category": "product_family", "name": "Red Hat Ansible Automation Platform 2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5499196" } } ], "category": "product_name", "name": "backend" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5499198" } } ], "category": "product_name", "name": "backend-rhel8" } ], "category": "product_family", "name": "Red Hat 3scale API Management Platform 2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5206383" } } ], "category": "product_name", "name": "bootc-aws-cuda-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5206384" } } ], "category": "product_name", "name": "bootc-azure-cuda-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811347" } } ], "category": "product_name", "name": "bootc-azure-rocm-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5205180" } } ], "category": "product_name", "name": "bootc-cuda-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-7220367" } } ], "category": "product_name", "name": "bootc-gaudi-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5198606" } } ], "category": "product_name", "name": "bootc-gcp-cuda-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811351" } } ], "category": "product_name", "name": "bootc-rocm-rhel9" } ], "category": "product_family", "name": "Red Hat Enterprise Linux AI (RHEL AI) 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222639" } } ], "category": "product_name", "name": "foreman-mcp-server-rhel9" } ], "category": "product_family", "name": "Red Hat Satellite 6" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276242" } } ], "category": "product_name", "name": "kn-ekb-dispatcher-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276243" } } ], "category": "product_name", "name": "kn-ekb-receiver-rhel9" } ], "category": "product_family", "name": "OpenShift Serverless" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222641" } } ], "category": "product_name", "name": "lightspeed-ocp-rag-rhel9" } ], "category": "product_family", "name": "OpenShift Lightspeed" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5157272" } } ], "category": "product_name", "name": "mta-solution-server-rhel9" } ], "category": "product_family", "name": "Migration Toolkit for Applications 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-7836501" } } ], "category": "product_name", "name": "odh-autorag-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5119808" } } ], "category": "product_name", "name": "odh-kserve-agent-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5119810" } } ], "category": "product_name", "name": "odh-kserve-controller-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5119811" } } ], "category": "product_name", "name": "odh-kserve-router-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5119813" } } ], "category": "product_name", "name": "odh-kserve-storage-initializer-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3112099" } } ], "category": "product_name", "name": "odh-llama-stack-core-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-7836503" } } ], "category": "product_name", "name": "odh-llm-d-kv-cache-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811359" } } ], "category": "product_name", "name": "odh-mlflow-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5826733" } } ], "category": "product_name", "name": "odh-mlserver-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068100" } } ], "category": "product_name", "name": "odh-pipeline-runtime-datascience-cpu-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068105" } } ], "category": "product_name", "name": "odh-pipeline-runtime-pytorch-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222767" } } ], "category": "product_name", "name": "odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068108" } } ], "category": "product_name", "name": "odh-pipeline-runtime-pytorch-rocm-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068110" } } ], "category": "product_name", "name": "odh-pipeline-runtime-tensorflow-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5155537" } } ], "category": "product_name", "name": "odh-pipeline-runtime-tensorflow-rocm-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-7468859" } } ], "category": "product_name", "name": "odh-th06-cpu-torch210-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-7468860" } } ], "category": "product_name", "name": "odh-th06-cuda130-torch210-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-7468861" } } ], "category": "product_name", "name": "odh-th06-rocm64-torch291-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5830423" } } ], "category": "product_name", "name": "odh-training-cuda128-torch29-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811362" } } ], "category": "product_name", "name": "odh-trustyai-garak-lls-provider-dsp-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5834017" } } ], "category": "product_name", "name": "odh-trustyai-nemo-guardrails-server-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5206389" } } ], "category": "product_name", "name": "odh-vllm-gaudi-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068114" } } ], "category": "product_name", "name": "odh-workbench-codeserver-datascience-cpu-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068116" } } ], "category": "product_name", "name": "odh-workbench-jupyter-datascience-cpu-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068126" } } ], "category": "product_name", "name": "odh-workbench-jupyter-pytorch-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222780" } } ], "category": "product_name", "name": "odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068128" } } ], "category": "product_name", "name": "odh-workbench-jupyter-pytorch-rocm-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068131" } } ], "category": "product_name", "name": "odh-workbench-jupyter-tensorflow-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5155538" } } ], "category": "product_name", "name": "odh-workbench-jupyter-tensorflow-rocm-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068134" } } ], "category": "product_name", "name": "odh-workbench-jupyter-trustyai-cpu-py312-rhel9" } ], "category": "product_family", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276219" } } ], "category": "product_name", "name": "openshift-migration-hook-runner-rhel8" } ], "category": "product_family", "name": "Migration Toolkit for Containers" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8022615" } } ], "category": "product_name", "name": "opentelemetry-extension-trace-propagators" } ], "category": "product_family", "name": "Red Hat Data Grid 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8022616" } } ], "category": "product_name", "name": "opentelemetry-extension-trace-propagators" } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5355695" } } ], "category": "product_name", "name": "quay-rhel9" } ], "category": "product_family", "name": "Red Hat Quay 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811320" } } ], "category": "product_name", "name": "vllm-cpu-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2858642" } } ], "category": "product_name", "name": "vllm-cuda-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-7836487" } } ], "category": "product_name", "name": "vllm-gaudi-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2858643" } } ], "category": "product_name", "name": "vllm-rocm-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5008756" } } ], "category": "product_name", "name": "vllm-spyre-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3112098" } } ], "category": "product_name", "name": "vllm-tpu-rhel9" } ], "category": "product_family", "name": "Red Hat AI Inference Server" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1843537", "product_identification_helper": { "cpe": "cpe:/a:ibm:infosphere_information_server:-" } } } ], "category": "product_name", "name": "IBM InfoSphere Information Server" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1914402", "product_identification_helper": { "cpe": "cpe:/a:ibm:tivoli_network_manager:-" } } } ], "category": "product_name", "name": "IBM Tivoli Network Manager" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/=0|<1.62.0", "product": { "name": "vers:unknown/>=0|<1.62.0", "product_id": "CSAFPID-7051414" } } ], "category": "product_name", "name": "opentelemetry-api" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.10.0", "product": { "name": "vers:unknown/0.10.0", "product_id": "CSAFPID-7051415", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.10.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.0", "product": { "name": "vers:unknown/0.11.0", "product_id": "CSAFPID-7051416", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.11.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.12.0", "product": { "name": "vers:unknown/0.12.0", "product_id": "CSAFPID-7051417", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.12.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.13.0", "product": { "name": "vers:unknown/0.13.0", "product_id": "CSAFPID-7051418", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.13.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.13.1", "product": { "name": "vers:unknown/0.13.1", "product_id": "CSAFPID-7051419", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.13.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.14.0", "product": { "name": "vers:unknown/0.14.0", "product_id": "CSAFPID-7051420", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.14.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.14.1", "product": { "name": "vers:unknown/0.14.1", "product_id": "CSAFPID-7051421", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.14.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.15.0", "product": { "name": "vers:unknown/0.15.0", "product_id": "CSAFPID-7051422", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.15.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.16.0", "product": { "name": "vers:unknown/0.16.0", "product_id": "CSAFPID-7051423", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.16.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.17.0", "product": { "name": "vers:unknown/0.17.0", "product_id": "CSAFPID-7051424", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.17.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.17.1", "product": { "name": "vers:unknown/0.17.1", "product_id": "CSAFPID-7051425", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.17.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.6.0", "product": { "name": "vers:unknown/0.6.0", "product_id": "CSAFPID-7051426", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.7.0", "product": { "name": "vers:unknown/0.7.0", "product_id": "CSAFPID-7051427", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.7.1", "product": { "name": "vers:unknown/0.7.1", "product_id": "CSAFPID-7051428", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.7.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8.0", "product": { "name": "vers:unknown/0.8.0", "product_id": "CSAFPID-7051429", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.8.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.9.1", "product": { "name": "vers:unknown/0.9.1", "product_id": "CSAFPID-7051430", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@0.9.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0", "product": { "name": "vers:unknown/1.0.0", "product_id": "CSAFPID-7051431", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.0.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.1", "product": { "name": "vers:unknown/1.0.1", "product_id": "CSAFPID-7051432", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.0.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.0", "product": { "name": "vers:unknown/1.1.0", "product_id": "CSAFPID-7051433", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.0", "product": { "name": "vers:unknown/1.10.0", "product_id": "CSAFPID-7051434", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.10.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.0-rc.1", "product": { "name": "vers:unknown/1.10.0-rc.1", "product_id": "CSAFPID-7051435", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.10.0-rc.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.0-rc.2", "product": { "name": "vers:unknown/1.10.0-rc.2", "product_id": "CSAFPID-7051436", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.10.0-rc.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.1", "product": { "name": "vers:unknown/1.10.1", "product_id": "CSAFPID-7051437", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.10.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.11.0", "product": { "name": "vers:unknown/1.11.0", "product_id": "CSAFPID-7051438", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.11.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.12.0", "product": { "name": "vers:unknown/1.12.0", "product_id": "CSAFPID-7051439", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.12.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.13.0", "product": { "name": "vers:unknown/1.13.0", "product_id": "CSAFPID-7051440", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.13.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.14.0", "product": { "name": "vers:unknown/1.14.0", "product_id": "CSAFPID-7051441", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.14.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.15.0", "product": { "name": "vers:unknown/1.15.0", "product_id": "CSAFPID-7051442", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.15.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.16.0", "product": { "name": "vers:unknown/1.16.0", "product_id": "CSAFPID-7051443", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.16.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.17.0", "product": { "name": "vers:unknown/1.17.0", "product_id": "CSAFPID-7051444", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.17.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.18.0", "product": { "name": "vers:unknown/1.18.0", "product_id": "CSAFPID-7051445", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.18.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.19.0", "product": { "name": "vers:unknown/1.19.0", "product_id": "CSAFPID-7051446", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.19.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0", "product": { "name": "vers:unknown/1.2.0", "product_id": "CSAFPID-7051447", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.20.0", "product": { "name": "vers:unknown/1.20.0", "product_id": "CSAFPID-7051448", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.20.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.20.1", "product": { "name": "vers:unknown/1.20.1", "product_id": "CSAFPID-7051449", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.20.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.21.0", "product": { "name": "vers:unknown/1.21.0", "product_id": "CSAFPID-7051450", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.21.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.22.0", "product": { "name": "vers:unknown/1.22.0", "product_id": "CSAFPID-7051451", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.22.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.23.0", "product": { "name": "vers:unknown/1.23.0", "product_id": "CSAFPID-7051452", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.23.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.23.1", "product": { "name": "vers:unknown/1.23.1", "product_id": "CSAFPID-7051453", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.23.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.24.0", "product": { "name": "vers:unknown/1.24.0", "product_id": "CSAFPID-7051454", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.24.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.25.0", "product": { "name": "vers:unknown/1.25.0", "product_id": "CSAFPID-7051455", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.25.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.26.0", "product": { "name": "vers:unknown/1.26.0", "product_id": "CSAFPID-7051456", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.26.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.27.0", "product": { "name": "vers:unknown/1.27.0", "product_id": "CSAFPID-7051457", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.27.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.28.0", "product": { "name": "vers:unknown/1.28.0", "product_id": "CSAFPID-7051458", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.28.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.29.0", "product": { "name": "vers:unknown/1.29.0", "product_id": "CSAFPID-7051459", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.29.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0", "product": { "name": "vers:unknown/1.3.0", "product_id": "CSAFPID-7051460", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.30.0", "product": { "name": "vers:unknown/1.30.0", "product_id": "CSAFPID-7051461", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.30.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.30.1", "product": { "name": "vers:unknown/1.30.1", "product_id": "CSAFPID-7051462", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.30.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.31.0", "product": { "name": "vers:unknown/1.31.0", "product_id": "CSAFPID-7051463", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.31.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.32.0", "product": { "name": "vers:unknown/1.32.0", "product_id": "CSAFPID-7051464", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.32.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.33.0", "product": { "name": "vers:unknown/1.33.0", "product_id": "CSAFPID-7051465", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.33.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.34.0", "product": { "name": "vers:unknown/1.34.0", "product_id": "CSAFPID-7051466", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.34.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.34.1", "product": { "name": "vers:unknown/1.34.1", "product_id": "CSAFPID-7051467", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.34.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.35.0", "product": { "name": "vers:unknown/1.35.0", "product_id": "CSAFPID-7051468", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.35.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.36.0", "product": { "name": "vers:unknown/1.36.0", "product_id": "CSAFPID-7051469", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.36.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.37.0", "product": { "name": "vers:unknown/1.37.0", "product_id": "CSAFPID-7051470", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.37.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.38.0", "product": { "name": "vers:unknown/1.38.0", "product_id": "CSAFPID-7051471", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.38.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.39.0", "product": { "name": "vers:unknown/1.39.0", "product_id": "CSAFPID-7051472", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.39.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.0", "product": { "name": "vers:unknown/1.4.0", "product_id": "CSAFPID-7051473", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.1", "product": { "name": "vers:unknown/1.4.1", "product_id": "CSAFPID-7051474", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.40.0", "product": { "name": "vers:unknown/1.40.0", "product_id": "CSAFPID-7051475", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.40.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.41.0", "product": { "name": "vers:unknown/1.41.0", "product_id": "CSAFPID-7051476", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.41.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.42.0", "product": { "name": "vers:unknown/1.42.0", "product_id": "CSAFPID-7051477", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.42.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.42.1", "product": { "name": "vers:unknown/1.42.1", "product_id": "CSAFPID-7051478", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.42.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.43.0", "product": { "name": "vers:unknown/1.43.0", "product_id": "CSAFPID-7051479", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.43.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.44.0", "product": { "name": "vers:unknown/1.44.0", "product_id": "CSAFPID-7051480", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.44.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.44.1", "product": { "name": "vers:unknown/1.44.1", "product_id": "CSAFPID-7051481", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.44.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.45.0", "product": { "name": "vers:unknown/1.45.0", "product_id": "CSAFPID-7051482", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.45.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.46.0", "product": { "name": "vers:unknown/1.46.0", "product_id": "CSAFPID-7051483", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.46.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.47.0", "product": { "name": "vers:unknown/1.47.0", "product_id": "CSAFPID-7051484", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.47.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.48.0", "product": { "name": "vers:unknown/1.48.0", "product_id": "CSAFPID-7051485", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.48.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.49.0", "product": { "name": "vers:unknown/1.49.0", "product_id": "CSAFPID-7051486", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.49.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.0", "product": { "name": "vers:unknown/1.5.0", "product_id": "CSAFPID-7051487", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.50.0", "product": { "name": "vers:unknown/1.50.0", "product_id": "CSAFPID-7051488", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.50.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.51.0", "product": { "name": "vers:unknown/1.51.0", "product_id": "CSAFPID-7051489", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.51.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.52.0", "product": { "name": "vers:unknown/1.52.0", "product_id": "CSAFPID-7051490", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.52.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.53.0", "product": { "name": "vers:unknown/1.53.0", "product_id": "CSAFPID-7051491", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.53.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.54.0", "product": { "name": "vers:unknown/1.54.0", "product_id": "CSAFPID-7051492", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.54.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.54.1", "product": { "name": "vers:unknown/1.54.1", "product_id": "CSAFPID-7051493", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.54.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.55.0", "product": { "name": "vers:unknown/1.55.0", "product_id": "CSAFPID-7051494", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.55.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.56.0", "product": { "name": "vers:unknown/1.56.0", "product_id": "CSAFPID-7051495", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.56.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.57.0", "product": { "name": "vers:unknown/1.57.0", "product_id": "CSAFPID-7051496", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.57.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.58.0", "product": { "name": "vers:unknown/1.58.0", "product_id": "CSAFPID-7051497", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.58.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.59.0", "product": { "name": "vers:unknown/1.59.0", "product_id": "CSAFPID-7051498", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.59.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.6.0", "product": { "name": "vers:unknown/1.6.0", "product_id": "CSAFPID-7051499", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.60.0", "product": { "name": "vers:unknown/1.60.0", "product_id": "CSAFPID-7051500", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.60.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.60.1", "product": { "name": "vers:unknown/1.60.1", "product_id": "CSAFPID-7051501", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.60.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.61.0", "product": { "name": "vers:unknown/1.61.0", "product_id": "CSAFPID-7051502", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.61.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0", "product": { "name": "vers:unknown/1.7.0", "product_id": "CSAFPID-7051503", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.1", "product": { "name": "vers:unknown/1.7.1", "product_id": "CSAFPID-7051504", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.7.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.0", "product": { "name": "vers:unknown/1.9.0", "product_id": "CSAFPID-7051505", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.1", "product": { "name": "vers:unknown/1.9.1", "product_id": "CSAFPID-7051506", "product_identification_helper": { "purl": "pkg:maven/io.opentelemetry/opentelemetry-extension-trace-propagators@1.9.1" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<1.62.0", "product": { "name": "vers:unknown/>=0|<1.62.0", "product_id": "CSAFPID-7051507" } } ], "category": "product_name", "name": "opentelemetry-extension-trace-propagators" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/1.62.0", "product": { "name": "vers:unknown/1.62.0", "product_id": "CSAFPID-8603759" } }, { "category": "product_version_range", "name": "vers:unknown/<1.62.0", "product": { "name": "vers:unknown/<1.62.0", "product_id": "CSAFPID-7940833" } }, { "category": "product_version_range", "name": "vers:unknown/v0.10.0", "product": { "name": "vers:unknown/v0.10.0", "product_id": "CSAFPID-8603781" } }, { "category": "product_version_range", "name": "vers:unknown/v0.11.0", "product": { "name": "vers:unknown/v0.11.0", "product_id": "CSAFPID-8603780" } }, { "category": "product_version_range", "name": "vers:unknown/v0.12.0", "product": { "name": "vers:unknown/v0.12.0", "product_id": "CSAFPID-8603779" } }, { "category": "product_version_range", "name": "vers:unknown/v0.13.0", "product": { "name": "vers:unknown/v0.13.0", "product_id": "CSAFPID-8603778" } }, { "category": "product_version_range", "name": "vers:unknown/v0.14.0", "product": { "name": "vers:unknown/v0.14.0", "product_id": "CSAFPID-8603777" } }, { "category": "product_version_range", "name": "vers:unknown/v0.15.0", "product": { "name": "vers:unknown/v0.15.0", "product_id": "CSAFPID-8603776" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.0", "product": { "name": "vers:unknown/v0.16.0", "product_id": "CSAFPID-8603775" } }, { "category": "product_version_range", "name": "vers:unknown/v0.17.0", "product": { "name": "vers:unknown/v0.17.0", "product_id": "CSAFPID-8603774" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0", "product": { "name": "vers:unknown/v1.0.0", "product_id": "CSAFPID-8603773" } }, { "category": "product_version_range", "name": "vers:unknown/v1.1.0", "product": { "name": "vers:unknown/v1.1.0", "product_id": "CSAFPID-8603772" } }, { "category": "product_version_range", "name": "vers:unknown/v1.10.0", "product": { "name": "vers:unknown/v1.10.0", "product_id": "CSAFPID-8603762" } }, { "category": "product_version_range", "name": "vers:unknown/v1.10.0-rc.1", "product": { "name": "vers:unknown/v1.10.0-rc.1", "product_id": "CSAFPID-8603764" } }, { "category": "product_version_range", "name": "vers:unknown/v1.10.0-rc.2", "product": { "name": "vers:unknown/v1.10.0-rc.2", "product_id": "CSAFPID-8603763" } }, { "category": "product_version_range", "name": "vers:unknown/v1.11.0", "product": { "name": "vers:unknown/v1.11.0", "product_id": "CSAFPID-8603761" } }, { "category": "product_version_range", "name": "vers:unknown/v1.12.0", "product": { "name": "vers:unknown/v1.12.0", "product_id": "CSAFPID-8603760" } }, { "category": "product_version_range", "name": "vers:unknown/v1.2.0", "product": { "name": "vers:unknown/v1.2.0", "product_id": "CSAFPID-8603771" } }, { "category": "product_version_range", "name": "vers:unknown/v1.3.0", "product": { "name": "vers:unknown/v1.3.0", "product_id": "CSAFPID-8603770" } }, { "category": "product_version_range", "name": "vers:unknown/v1.4.0", "product": { "name": "vers:unknown/v1.4.0", "product_id": "CSAFPID-8603769" } }, { "category": "product_version_range", "name": "vers:unknown/v1.5.0", "product": { "name": "vers:unknown/v1.5.0", "product_id": "CSAFPID-8603768" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.0", "product": { "name": "vers:unknown/v1.6.0", "product_id": "CSAFPID-8603767" } }, { "category": "product_version_range", "name": "vers:unknown/v1.7.0", "product": { "name": "vers:unknown/v1.7.0", "product_id": "CSAFPID-8603766" } }, { "category": "product_version_range", "name": "vers:unknown/v1.9.0", "product": { "name": "vers:unknown/v1.9.0", "product_id": "CSAFPID-8603765" } } ], "category": "product_name", "name": "opentelemetry-java" } ], "category": "vendor", "name": "open-telemetry" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-45292", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "CSAFPID-8578587", "CSAFPID-8578590", "CSAFPID-8578591", "CSAFPID-8578592", "CSAFPID-8578593", "CSAFPID-8578594", "CSAFPID-8578595", "CSAFPID-8578596", "CSAFPID-8578597", "CSAFPID-8578598", "CSAFPID-8578599", "CSAFPID-8578600", "CSAFPID-8578601", "CSAFPID-8578602", "CSAFPID-8578603", "CSAFPID-8879321", "CSAFPID-8879322", "CSAFPID-8879323", "CSAFPID-8879324", "CSAFPID-8879325", "CSAFPID-8879326", "CSAFPID-8879327", "CSAFPID-8879328", "CSAFPID-8879329", "CSAFPID-8879330", "CSAFPID-8879332", "CSAFPID-8879333", "CSAFPID-8879334" ] } ], "notes": [ { "category": "description", "text": "## Overview\n\nA vulnerability affects the baggage propagation implementation in\n`opentelemetry-api` and `opentelemetry-extension-trace-propagators`. Parsing oversized baggage\ncauses unbounded memory allocation and CPU consumption. Because baggage is automatically\nre-injected into every outgoing request, the effect can fan out to downstream services that\nnever received the original malicious request.\n\n## Technical Details\n\n- `W3CBaggagePropagator` did not enforce any limit on the total size or entry count of the\n `baggage` header. The parser iterated character-by-character through the entire value\n regardless of length.\n- `JaegerPropagator` and `OtTracePropagator` had the same gap in their respective baggage\n extraction paths.\n- The W3C Baggage specification recommends a maximum of 8,192 bytes and 180 entries; none of\n these limits were enforced.\n\n## Impact\n\nThe practical availability impact for most deployments is limited. Every major Java HTTP server\nenforces its own header size limit (Tomcat, Jetty, Netty, Vert.x, and gRPC-Java all default to\n8 KiB), constraining what an external attacker can deliver before the application is reached.\nThe risk is higher when transport-layer limits are absent — e.g., a compromised internal service\ncommunicating over a non-HTTP or custom transport.\n\n## Remediation\n\nUpdate to version 1.62.0 or later ([#8380](https://github.com/open-telemetry/opentelemetry-java/pull/8380)).\nThe fix enforces limits consistent with the W3C Baggage specification at the propagator level:\n\n- Maximum total baggage size: 8,192 bytes across all `baggage` header values\n- Maximum number of entries: 64\n\nHeaders that would exceed either limit are dropped at the point the limit is reached;\nalready-extracted valid entries are retained.\n\n## Workarounds\n\nEnsure HTTP header size limits are configured at the server or gateway level. Most Java HTTP\nservers enforce an 8 KiB header limit by default, which mitigates external attack vectors\nindependently of this fix.\n\n## References\n\n- [W3C Baggage Specification §Limits](https://www.w3.org/TR/baggage/#limits)", "title": "github - https://api.github.com/advisories/GHSA-rcgg-9c38-7xpx" }, { "category": "description", "text": "## Overview\n\nA vulnerability affects the baggage propagation implementation in\n`opentelemetry-api` and `opentelemetry-extension-trace-propagators`. Parsing oversized baggage\ncauses unbounded memory allocation and CPU consumption. Because baggage is automatically\nre-injected into every outgoing request, the effect can fan out to downstream services that\nnever received the original malicious request.\n\n## Technical Details\n\n- `W3CBaggagePropagator` did not enforce any limit on the total size or entry count of the\n `baggage` header. The parser iterated character-by-character through the entire value\n regardless of length.\n- `JaegerPropagator` and `OtTracePropagator` had the same gap in their respective baggage\n extraction paths.\n- The W3C Baggage specification recommends a maximum of 8,192 bytes and 180 entries; none of\n these limits were enforced.\n\n## Impact\n\nThe practical availability impact for most deployments is limited. Every major Java HTTP server\nenforces its own header size limit (Tomcat, Jetty, Netty, Vert.x, and gRPC-Java all default to\n8 KiB), constraining what an external attacker can deliver before the application is reached.\nThe risk is higher when transport-layer limits are absent — e.g., a compromised internal service\ncommunicating over a non-HTTP or custom transport.\n\n## Remediation\n\nUpdate to version 1.62.0 or later ([#8380](https://github.com/open-telemetry/opentelemetry-java/pull/8380)).\nThe fix enforces limits consistent with the W3C Baggage specification at the propagator level:\n\n- Maximum total baggage size: 8,192 bytes across all `baggage` header values\n- Maximum number of entries: 64\n\nHeaders that would exceed either limit are dropped at the point the limit is reached;\nalready-extracted valid entries are retained.\n\n## Workarounds\n\nEnsure HTTP header size limits are configured at the server or gateway level. Most Java HTTP\nservers enforce an 8 KiB header limit by default, which mitigates external attack vectors\nindependently of this fix.\n\n## References\n\n- [W3C Baggage Specification §Limits](https://www.w3.org/TR/baggage/#limits)", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Maven%2FGHSA-rcgg-9c38-7xpx.json?alt=media" }, { "category": "description", "text": "opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to 1.62.0, a vulnerability affects the baggage propagation implementation in opentelemetry-api and opentelemetry-extension-trace-propagators. Parsing oversized baggage causes unbounded memory allocation and CPU consumption. Because baggage is automatically re-injected into every outgoing request, the effect can fan out to downstream services that never received the original malicious request. This vulnerability is fixed in 1.62.0.", "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-45292" }, { "category": "description", "text": "opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to 1.62.0, a vulnerability affects the baggage propagation implementation in opentelemetry-api and opentelemetry-extension-trace-propagators. Parsing oversized baggage causes unbounded memory allocation and CPU consumption. Because baggage is automatically re-injected into every outgoing request, the effect can fan out to downstream services that never received the original malicious request. This vulnerability is fixed in 1.62.0.", "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45292.json" }, { "category": "description", "text": "A flaw was found in OpenTelemetry Java, specifically within the baggage propagation implementation of opentelemetry-api and opentelemetry-extension-trace-propagators. A remote attacker can exploit this vulnerability by sending oversized baggage, which leads to unbounded memory allocation and high CPU consumption. This can result in a Denial of Service (DoS) for the affected service. Furthermore, because baggage is automatically re-injected into outgoing requests, the impact can spread to other downstream services.", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-45292.json" }, { "category": "description", "text": "A flaw was found in OpenTelemetry Java, specifically within the baggage propagation implementation of opentelemetry-api and opentelemetry-extension-trace-propagators. A remote attacker can exploit this vulnerability by sending oversized baggage, which leads to unbounded memory allocation and high CPU consumption. This can result in a Denial of Service (DoS) for the affected service. Furthermore, because baggage is automatically re-injected into outgoing requests, the impact can spread to other downstream services.", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:28573.json" }, { "category": "description", "text": "A flaw was found in OpenTelemetry Java, specifically within the baggage propagation implementation of opentelemetry-api and opentelemetry-extension-trace-propagators. A remote attacker can exploit this vulnerability by sending oversized baggage, which leads to unbounded memory allocation and high CPU consumption. This can result in a Denial of Service (DoS) for the affected service. Furthermore, because baggage is automatically re-injected into outgoing requests, the impact can spread to other downstream services.", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:36820.json" }, { "category": "description", "text": "opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to 1.62.0, a vulnerability affects the baggage propagation implementation in opentelemetry-api and opentelemetry-extension-trace-propagators. Parsing oversized baggage causes unbounded memory allocation and CPU consumption. Because baggage is automatically re-injected into every outgoing request, the effect can fan out to downstream services that never received the original malicious request. This vulnerability is fixed in 1.62.0.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-45292.json?alt=media" }, { "category": "description", "text": "A flaw was found in OpenTelemetry Java, specifically within the baggage propagation implementation of opentelemetry-api and opentelemetry-extension-trace-propagators. A remote attacker can exploit this vulnerability by sending oversized baggage, which leads to unbounded memory allocation and high CPU consumption. This can result in a Denial of Service (DoS) for the affected service. Furthermore, because baggage is automatically re-injected into outgoing requests, the impact can spread to other downstream services.", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:41951.json" }, { "category": "description", "text": "A flaw was found in OpenTelemetry Java, specifically within the baggage propagation implementation of opentelemetry-api and opentelemetry-extension-trace-propagators. A remote attacker can exploit this vulnerability by sending oversized baggage, which leads to unbounded memory allocation and high CPU consumption. This can result in a Denial of Service (DoS) for the affected service. Furthermore, because baggage is automatically re-injected into outgoing requests, the impact can spread to other downstream services.", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:43038.json" }, { "category": "other", "text": "0.01097", "title": "EPSS" }, { "category": "other", "text": "3.9", "title": "NCSC Score" }, { "category": "other", "text": "VENDOR FIX as product remediation category, The value of the most recent EPSS score, There is product data available from source Certbundde, Is related to (a version of) an uncommon product", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "There is product_remediation data available from source Redhat, Is related to a product by vendor Open Source, Is related to a product by vendor Red Hat, The value of the most recent CVSS (V3) score, Is related to a product by vendor Ibm", "title": "NCSC Score top decreasing factors" }, { "category": "details", "text": "Severity: 3\n", "title": "Vendor assessment" } ], "product_status": { "fixed": [ "CSAFPID-8491883", "CSAFPID-8578588", "CSAFPID-8578589", "CSAFPID-8868641", "CSAFPID-8879320" ], "known_affected": [ "CSAFPID-7051314", "CSAFPID-7051315", "CSAFPID-7051316", "CSAFPID-7051317", "CSAFPID-7051318", "CSAFPID-7051319", "CSAFPID-7051320", "CSAFPID-7051321", "CSAFPID-7051322", "CSAFPID-7051323", "CSAFPID-7051324", "CSAFPID-7051325", "CSAFPID-7051326", "CSAFPID-7051327", "CSAFPID-7051328", "CSAFPID-7051329", "CSAFPID-7051330", "CSAFPID-7051331", "CSAFPID-7051332", "CSAFPID-7051333", "CSAFPID-7051334", "CSAFPID-7051335", "CSAFPID-7051336", "CSAFPID-7051337", "CSAFPID-7051338", "CSAFPID-7051339", "CSAFPID-7051340", "CSAFPID-7051341", "CSAFPID-7051342", "CSAFPID-7051343", "CSAFPID-7051344", "CSAFPID-7051345", "CSAFPID-7051346", "CSAFPID-7051347", "CSAFPID-7051348", "CSAFPID-7051349", "CSAFPID-7051350", "CSAFPID-7051351", "CSAFPID-7051352", "CSAFPID-7051353", "CSAFPID-7051354", "CSAFPID-7051355", "CSAFPID-7051356", "CSAFPID-7051357", "CSAFPID-7051358", "CSAFPID-7051359", "CSAFPID-7051360", "CSAFPID-7051361", "CSAFPID-7051362", "CSAFPID-7051363", "CSAFPID-7051364", "CSAFPID-7051365", "CSAFPID-7051366", "CSAFPID-7051367", "CSAFPID-7051368", "CSAFPID-7051369", "CSAFPID-7051370", "CSAFPID-7051371", "CSAFPID-7051372", "CSAFPID-7051373", "CSAFPID-7051374", "CSAFPID-7051375", "CSAFPID-7051376", "CSAFPID-7051377", "CSAFPID-7051378", "CSAFPID-7051379", "CSAFPID-7051380", "CSAFPID-7051381", "CSAFPID-7051382", "CSAFPID-7051383", "CSAFPID-7051384", "CSAFPID-7051385", "CSAFPID-7051386", "CSAFPID-7051387", "CSAFPID-7051388", "CSAFPID-7051389", "CSAFPID-7051390", "CSAFPID-7051391", "CSAFPID-7051392", "CSAFPID-7051393", "CSAFPID-7051394", "CSAFPID-7051395", "CSAFPID-7051396", "CSAFPID-7051397", "CSAFPID-7051398", "CSAFPID-7051399", "CSAFPID-7051400", "CSAFPID-7051401", "CSAFPID-7051402", "CSAFPID-7051403", "CSAFPID-7051404", "CSAFPID-7051405", "CSAFPID-7051406", "CSAFPID-7051407", "CSAFPID-7051408", "CSAFPID-7051409", "CSAFPID-7051410", "CSAFPID-7051411", "CSAFPID-7051412", "CSAFPID-7051413", "CSAFPID-7051414", "CSAFPID-7051415", "CSAFPID-7051416", "CSAFPID-7051417", "CSAFPID-7051418", "CSAFPID-7051419", "CSAFPID-7051420", "CSAFPID-7051421", "CSAFPID-7051422", "CSAFPID-7051423", "CSAFPID-7051424", "CSAFPID-7051425", "CSAFPID-7051426", "CSAFPID-7051427", "CSAFPID-7051428", "CSAFPID-7051429", "CSAFPID-7051430", "CSAFPID-7051431", "CSAFPID-7051432", "CSAFPID-7051433", "CSAFPID-7051434", "CSAFPID-7051435", "CSAFPID-7051436", "CSAFPID-7051437", "CSAFPID-7051438", "CSAFPID-7051439", "CSAFPID-7051440", "CSAFPID-7051441", "CSAFPID-7051442", "CSAFPID-7051443", "CSAFPID-7051444", "CSAFPID-7051445", "CSAFPID-7051446", "CSAFPID-7051447", "CSAFPID-7051448", "CSAFPID-7051449", "CSAFPID-7051450", "CSAFPID-7051451", "CSAFPID-7051452", "CSAFPID-7051453", "CSAFPID-7051454", "CSAFPID-7051455", "CSAFPID-7051456", "CSAFPID-7051457", "CSAFPID-7051458", "CSAFPID-7051459", "CSAFPID-7051460", "CSAFPID-7051461", "CSAFPID-7051462", "CSAFPID-7051463", "CSAFPID-7051464", "CSAFPID-7051465", "CSAFPID-7051466", "CSAFPID-7051467", "CSAFPID-7051468", "CSAFPID-7051469", "CSAFPID-7051470", "CSAFPID-7051471", "CSAFPID-7051472", "CSAFPID-7051473", "CSAFPID-7051474", "CSAFPID-7051475", "CSAFPID-7051476", "CSAFPID-7051477", "CSAFPID-7051478", "CSAFPID-7051479", "CSAFPID-7051480", "CSAFPID-7051481", "CSAFPID-7051482", "CSAFPID-7051483", "CSAFPID-7051484", "CSAFPID-7051485", "CSAFPID-7051486", "CSAFPID-7051487", "CSAFPID-7051488", "CSAFPID-7051489", "CSAFPID-7051490", "CSAFPID-7051491", "CSAFPID-7051492", "CSAFPID-7051493", "CSAFPID-7051494", "CSAFPID-7051495", "CSAFPID-7051496", "CSAFPID-7051497", "CSAFPID-7051498", "CSAFPID-7051499", "CSAFPID-7051500", "CSAFPID-7051501", "CSAFPID-7051502", "CSAFPID-7051503", "CSAFPID-7051504", "CSAFPID-7051505", "CSAFPID-7051506", "CSAFPID-7051507", "CSAFPID-7940833", "CSAFPID-7940834", "CSAFPID-7940835", "CSAFPID-1439279", "CSAFPID-1439292", "CSAFPID-1439304", "CSAFPID-1439310", "CSAFPID-1439313", "CSAFPID-1441076", "CSAFPID-1441150", "CSAFPID-1441200", "CSAFPID-1508257", "CSAFPID-1508262", "CSAFPID-1508264", "CSAFPID-2518221", "CSAFPID-2524222", "CSAFPID-2577689", "CSAFPID-2698059", "CSAFPID-2858641", "CSAFPID-2858642", "CSAFPID-2858643", "CSAFPID-3112098", "CSAFPID-3112099", "CSAFPID-4534155", "CSAFPID-4994901", "CSAFPID-5008756", "CSAFPID-5035448", "CSAFPID-5068100", "CSAFPID-5068105", "CSAFPID-5068108", "CSAFPID-5068110", "CSAFPID-5068114", "CSAFPID-5068116", "CSAFPID-5068126", "CSAFPID-5068128", "CSAFPID-5068131", "CSAFPID-5068134", "CSAFPID-5119808", "CSAFPID-5119810", "CSAFPID-5119811", "CSAFPID-5119813", "CSAFPID-5155537", "CSAFPID-5155538", "CSAFPID-5157272", "CSAFPID-5172458", "CSAFPID-5172461", "CSAFPID-5198605", "CSAFPID-5198606", "CSAFPID-5205180", "CSAFPID-5206383", "CSAFPID-5206384", "CSAFPID-5206389", "CSAFPID-5222639", "CSAFPID-5222641", "CSAFPID-5222660", "CSAFPID-5222767", "CSAFPID-5222780", "CSAFPID-5276219", "CSAFPID-5276242", "CSAFPID-5276243", "CSAFPID-5355695", "CSAFPID-5499196", "CSAFPID-5499198", "CSAFPID-5811320", "CSAFPID-5811347", "CSAFPID-5811351", "CSAFPID-5811359", "CSAFPID-5811362", "CSAFPID-5826733", "CSAFPID-5830423", "CSAFPID-5834017", "CSAFPID-6982270", "CSAFPID-6982271", "CSAFPID-7220367", "CSAFPID-7468859", "CSAFPID-7468860", "CSAFPID-7468861", "CSAFPID-7836487", "CSAFPID-7836501", "CSAFPID-7836503", "CSAFPID-8022614", "CSAFPID-8022615", "CSAFPID-8022616", "CSAFPID-8557524", "CSAFPID-8557525", "CSAFPID-8557526", "CSAFPID-8557527", "CSAFPID-8557528", "CSAFPID-8603759", "CSAFPID-8603760", "CSAFPID-8603761", "CSAFPID-8603762", "CSAFPID-8603763", "CSAFPID-8603764", "CSAFPID-8603765", "CSAFPID-8603766", "CSAFPID-8603767", "CSAFPID-8603768", "CSAFPID-8603769", "CSAFPID-8603770", "CSAFPID-8603771", "CSAFPID-8603772", "CSAFPID-8603773", "CSAFPID-8603774", "CSAFPID-8603775", "CSAFPID-8603776", "CSAFPID-8603777", "CSAFPID-8603778", "CSAFPID-8603779", "CSAFPID-8603780", "CSAFPID-8603781", "CSAFPID-1843537", "CSAFPID-1914402", "CSAFPID-9012188", "CSAFPID-1317175", "CSAFPID-5187459" ], "known_not_affected": [ "CSAFPID-8578587", "CSAFPID-8578590", "CSAFPID-8578591", "CSAFPID-8578592", "CSAFPID-8578593", "CSAFPID-8578594", "CSAFPID-8578595", "CSAFPID-8578596", "CSAFPID-8578597", "CSAFPID-8578598", "CSAFPID-8578599", "CSAFPID-8578600", "CSAFPID-8578601", "CSAFPID-8578602", "CSAFPID-8578603", "CSAFPID-8575407", "CSAFPID-8815748", "CSAFPID-8870944", "CSAFPID-8879321", "CSAFPID-8879322", "CSAFPID-8879323", "CSAFPID-8879324", "CSAFPID-8879325", "CSAFPID-8879326", "CSAFPID-8879327", "CSAFPID-8879328", "CSAFPID-8879329", "CSAFPID-8879330", "CSAFPID-8879332", "CSAFPID-8879333", "CSAFPID-8879334", "CSAFPID-8884943", "CSAFPID-8884911" ] }, "references": [ { "category": "external", "summary": "Source - ncscclear", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0326" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Maven%2FGHSA-rcgg-9c38-7xpx.json?alt=media" }, { "category": "external", "summary": "Source - github", "url": "https://api.github.com/advisories/GHSA-rcgg-9c38-7xpx" }, { "category": "external", "summary": "Source - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-45292" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45292.json" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-45292.json" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:28573.json" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2242.json" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:36820.json" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-45292.json?alt=media" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=10000" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:41951.json" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:43038.json" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2915.json" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=20000" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-45292" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/open-telemetry/opentelemetry-java/security/advisories/GHSA-rcgg-9c38-7xpx" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/open-telemetry/opentelemetry-java/pull/8380" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/open-telemetry/opentelemetry-java/commit/03837d3c1763bc35464aea1078671e2ef2336a5f" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/open-telemetry/opentelemetry-java/releases/tag/v1.62.0" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/advisories/GHSA-rcgg-9c38-7xpx" }, { "category": "external", "summary": "Reference - redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-45292" }, { "category": "external", "summary": "Reference - osv; redhat", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45292" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv; redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-45292" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv; redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482785" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:28573" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/products/red-hat-offline-knowledge-portal" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44249" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-45416" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-50010" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-5795" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/updates/classification/" }, { "category": "external", "summary": "Reference - redhat", "url": "https://docs.redhat.com/en/documentation/red_hat_offline_knowledge_portal/1" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28573.json" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45292.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2242.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2242" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7279423" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:36820" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.29/html/administration_guide/installing-devspaces" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-12151" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-12856" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-34986" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-39821" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-39829" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42338" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42578" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42579" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42581" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42583" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42584" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42587" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44486" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44487" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44488" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44492" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44494" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44495" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44496" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44774" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44893" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-45736" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-46595" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-48043" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-48059" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-48779" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-50559" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-6734" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-9697" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36820.json" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45292.json" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:41951" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477213" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477219" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477220" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477231" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484115" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484116" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484123" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484124" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486697" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486716" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488053" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488062" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488081" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488383" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488388" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488391" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488400" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488413" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488429" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488433" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488437" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488439" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488442" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488934" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491999" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492010" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41951.json" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:43038" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-13676" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-25681" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-27136" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-28684" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-33079" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-33811" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-34993" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-35397" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-39820" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-40110" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-40171" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42266" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42499" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42504" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42557" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42561" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44431" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44432" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44727" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44843" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-48526" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-48710" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-48746" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-48990" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-5422" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-54283" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-59939" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-6322" }, { "category": "external", "summary": "Reference - redhat", "url": "https://developers.redhat.com/products/mta/overview" }, { "category": "external", "summary": "Reference - redhat", "url": "https://docs.redhat.com/en/documentation/migration_toolkit_for_applications/" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_43038.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7282933" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7283607" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2915.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2915" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.keycloak.org/2026/08/keycloak-2672-released" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:56524" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:56523" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:56520" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:56519" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/Red-Darkin/CVE-2026-18963-keycloak" } ], "remediations": [ { "category": "vendor_fix", "details": "The container image provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.", "product_ids": [ "CSAFPID-8491882", "CSAFPID-8491883" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:28573" }, { "category": "vendor_fix", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-8578586", "CSAFPID-8578588", "CSAFPID-8578589" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:36820" }, { "category": "vendor_fix", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-8868641" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:41951" }, { "category": "vendor_fix", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.", "product_ids": [ "CSAFPID-8879319", "CSAFPID-8879320" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:43038" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1317175", "CSAFPID-1439279", "CSAFPID-1439292", "CSAFPID-1439304", "CSAFPID-1439310", "CSAFPID-1439313", "CSAFPID-1441076", "CSAFPID-1441150", "CSAFPID-1441200", "CSAFPID-1508257", "CSAFPID-1508262", "CSAFPID-1508264", "CSAFPID-1843537", "CSAFPID-1914402", "CSAFPID-2518221", "CSAFPID-2524222", "CSAFPID-2577689", "CSAFPID-2698059", "CSAFPID-2858641", "CSAFPID-2858642", "CSAFPID-2858643", "CSAFPID-3112098", "CSAFPID-3112099", "CSAFPID-4534155", "CSAFPID-4994901", "CSAFPID-5008756", "CSAFPID-5035448", "CSAFPID-5068100", "CSAFPID-5068105", "CSAFPID-5068108", "CSAFPID-5068110", "CSAFPID-5068114", "CSAFPID-5068116", "CSAFPID-5068126", "CSAFPID-5068128", "CSAFPID-5068131", "CSAFPID-5068134", "CSAFPID-5119808", "CSAFPID-5119810", "CSAFPID-5119811", "CSAFPID-5119813", "CSAFPID-5155537", "CSAFPID-5155538", "CSAFPID-5157272", "CSAFPID-5172458", "CSAFPID-5172461", "CSAFPID-5187459", "CSAFPID-5198605", "CSAFPID-5198606", "CSAFPID-5205180", "CSAFPID-5206383", "CSAFPID-5206384", "CSAFPID-5206389", "CSAFPID-5222639", "CSAFPID-5222641", "CSAFPID-5222660", "CSAFPID-5222767", "CSAFPID-5222780", "CSAFPID-5276219", "CSAFPID-5276242", "CSAFPID-5276243", "CSAFPID-5355695", "CSAFPID-5499196", "CSAFPID-5499198", "CSAFPID-5811320", "CSAFPID-5811347", "CSAFPID-5811351", "CSAFPID-5811359", "CSAFPID-5811362", "CSAFPID-5826733", "CSAFPID-5830423", "CSAFPID-5834017", "CSAFPID-6982270", "CSAFPID-6982271", "CSAFPID-7051314", "CSAFPID-7051315", "CSAFPID-7051316", "CSAFPID-7051317", "CSAFPID-7051318", "CSAFPID-7051319", "CSAFPID-7051320", "CSAFPID-7051321", "CSAFPID-7051322", "CSAFPID-7051323", "CSAFPID-7051324", "CSAFPID-7051325", "CSAFPID-7051326", "CSAFPID-7051327", "CSAFPID-7051328", "CSAFPID-7051329", "CSAFPID-7051330", "CSAFPID-7051331", "CSAFPID-7051332", "CSAFPID-7051333", "CSAFPID-7051334", "CSAFPID-7051335", "CSAFPID-7051336", "CSAFPID-7051337", "CSAFPID-7051338", "CSAFPID-7051339", "CSAFPID-7051340", "CSAFPID-7051341", "CSAFPID-7051342", "CSAFPID-7051343", "CSAFPID-7051344", "CSAFPID-7051345", "CSAFPID-7051346", "CSAFPID-7051347", "CSAFPID-7051348", "CSAFPID-7051349", "CSAFPID-7051350", "CSAFPID-7051351", "CSAFPID-7051352", "CSAFPID-7051353", "CSAFPID-7051354", "CSAFPID-7051355", "CSAFPID-7051356", "CSAFPID-7051357", "CSAFPID-7051358", "CSAFPID-7051359", "CSAFPID-7051360", "CSAFPID-7051361", "CSAFPID-7051362", "CSAFPID-7051363", "CSAFPID-7051364", "CSAFPID-7051365", "CSAFPID-7051366", "CSAFPID-7051367", "CSAFPID-7051368", "CSAFPID-7051369", "CSAFPID-7051370", "CSAFPID-7051371", "CSAFPID-7051372", "CSAFPID-7051373", "CSAFPID-7051374", "CSAFPID-7051375", "CSAFPID-7051376", "CSAFPID-7051377", "CSAFPID-7051378", "CSAFPID-7051379", "CSAFPID-7051380", "CSAFPID-7051381", "CSAFPID-7051382", "CSAFPID-7051383", "CSAFPID-7051384", "CSAFPID-7051385", "CSAFPID-7051386", "CSAFPID-7051387", "CSAFPID-7051388", "CSAFPID-7051389", "CSAFPID-7051390", "CSAFPID-7051391", "CSAFPID-7051392", "CSAFPID-7051393", "CSAFPID-7051394", "CSAFPID-7051395", "CSAFPID-7051396", "CSAFPID-7051397", "CSAFPID-7051398", "CSAFPID-7051399", "CSAFPID-7051400", "CSAFPID-7051401", "CSAFPID-7051402", "CSAFPID-7051403", "CSAFPID-7051404", "CSAFPID-7051405", "CSAFPID-7051406", "CSAFPID-7051407", "CSAFPID-7051408", "CSAFPID-7051409", "CSAFPID-7051410", "CSAFPID-7051411", "CSAFPID-7051412", "CSAFPID-7051413", "CSAFPID-7051414", "CSAFPID-7051415", "CSAFPID-7051416", "CSAFPID-7051417", "CSAFPID-7051418", "CSAFPID-7051419", "CSAFPID-7051420", "CSAFPID-7051421", "CSAFPID-7051422", "CSAFPID-7051423", "CSAFPID-7051424", "CSAFPID-7051425", "CSAFPID-7051426", "CSAFPID-7051427", "CSAFPID-7051428", "CSAFPID-7051429", "CSAFPID-7051430", "CSAFPID-7051431", "CSAFPID-7051432", "CSAFPID-7051433", "CSAFPID-7051434", "CSAFPID-7051435", "CSAFPID-7051436", "CSAFPID-7051437", "CSAFPID-7051438", "CSAFPID-7051439", "CSAFPID-7051440", "CSAFPID-7051441", "CSAFPID-7051442", "CSAFPID-7051443", "CSAFPID-7051444", "CSAFPID-7051445", "CSAFPID-7051446", "CSAFPID-7051447", "CSAFPID-7051448", "CSAFPID-7051449", "CSAFPID-7051450", "CSAFPID-7051451", "CSAFPID-7051452", "CSAFPID-7051453", "CSAFPID-7051454", "CSAFPID-7051455", "CSAFPID-7051456", "CSAFPID-7051457", "CSAFPID-7051458", "CSAFPID-7051459", "CSAFPID-7051460", "CSAFPID-7051461", "CSAFPID-7051462", "CSAFPID-7051463", "CSAFPID-7051464", "CSAFPID-7051465", "CSAFPID-7051466", "CSAFPID-7051467", "CSAFPID-7051468", "CSAFPID-7051469", "CSAFPID-7051470", "CSAFPID-7051471", "CSAFPID-7051472", "CSAFPID-7051473", "CSAFPID-7051474", "CSAFPID-7051475", "CSAFPID-7051476", "CSAFPID-7051477", "CSAFPID-7051478", "CSAFPID-7051479", "CSAFPID-7051480", "CSAFPID-7051481", "CSAFPID-7051482", "CSAFPID-7051483", "CSAFPID-7051484", "CSAFPID-7051485", "CSAFPID-7051486", "CSAFPID-7051487", "CSAFPID-7051488", "CSAFPID-7051489", "CSAFPID-7051490", "CSAFPID-7051491", "CSAFPID-7051492", "CSAFPID-7051493", "CSAFPID-7051494", "CSAFPID-7051495", "CSAFPID-7051496", "CSAFPID-7051497", "CSAFPID-7051498", "CSAFPID-7051499", "CSAFPID-7051500", "CSAFPID-7051501", "CSAFPID-7051502", "CSAFPID-7051503", "CSAFPID-7051504", "CSAFPID-7051505", "CSAFPID-7051506", "CSAFPID-7051507", "CSAFPID-7220367", "CSAFPID-7468859", "CSAFPID-7468860", "CSAFPID-7468861", "CSAFPID-7836487", "CSAFPID-7836501", "CSAFPID-7836503", "CSAFPID-7940833", "CSAFPID-7940834", "CSAFPID-7940835", "CSAFPID-8022614", "CSAFPID-8022615", "CSAFPID-8022616", "CSAFPID-8557524", "CSAFPID-8557525", "CSAFPID-8557526", "CSAFPID-8557527", "CSAFPID-8557528", "CSAFPID-8603759", "CSAFPID-8603760", "CSAFPID-8603761", "CSAFPID-8603762", "CSAFPID-8603763", "CSAFPID-8603764", "CSAFPID-8603765", "CSAFPID-8603766", "CSAFPID-8603767", "CSAFPID-8603768", "CSAFPID-8603769", "CSAFPID-8603770", "CSAFPID-8603771", "CSAFPID-8603772", "CSAFPID-8603773", "CSAFPID-8603774", "CSAFPID-8603775", "CSAFPID-8603776", "CSAFPID-8603777", "CSAFPID-8603778", "CSAFPID-8603779", "CSAFPID-8603780", "CSAFPID-8603781", "CSAFPID-9012188" ] } ], "title": "CVE-2026-45292" } ] }