{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-4539", "tracking": { "current_release_date": "2026-03-30T16:18:56.770428Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-4539", "initial_release_date": "2026-03-21T12:03:23.276508Z", "revision_history": [ { "date": "2026-03-21T12:03:23.276508Z", "number": "1", "summary": "NCSC Score created." }, { "date": "2026-03-22T06:24:52.131521Z", "number": "2", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (5).| CWES updated (1)." }, { "date": "2026-03-22T06:24:57.345178Z", "number": "3", "summary": "NCSC Score updated." }, { "date": "2026-03-22T06:39:14.805906Z", "number": "4", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Exploits created (1).| References created (4).| CWES updated (1)." }, { "date": "2026-03-22T06:39:18.895701Z", "number": "5", "summary": "NCSC Score updated." }, { "date": "2026-03-22T12:45:19.236628Z", "number": "6", "summary": "Source created.| CVE status created. (valid)| Products connected (2)." }, { "date": "2026-03-22T12:45:26.339884Z", "number": "7", "summary": "NCSC Score updated." }, { "date": "2026-03-22T15:09:03.632411Z", "number": "8", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-22T15:09:10.002912Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-03-23T06:45:26.005546Z", "number": "10", "summary": "Description created for source." }, { "date": "2026-03-23T12:30:43.525148Z", "number": "11", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (115).| Product Identifiers created (15).| Products created (2).| References created (7).| CWES updated (1).| Vendor_assessment created." }, { "date": "2026-03-23T12:31:00.258320Z", "number": "12", "summary": "NCSC Score updated." }, { "date": "2026-03-24T03:12:48.771258Z", "number": "13", "summary": "Unknown change." }, { "date": "2026-03-24T03:12:52.847875Z", "number": "14", "summary": "NCSC Score updated." }, { "date": "2026-03-24T20:55:25.122882Z", "number": "15", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (7).| CWES updated (1)." }, { "date": "2026-03-24T20:57:46.064592Z", "number": "16", "summary": "NCSC Score updated." }, { "date": "2026-03-25T18:36:36.037931Z", "number": "17", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (60).| Product Identifiers created (67).| Products created (8).| References created (5).| CWES updated (1)." }, { "date": "2026-03-25T18:36:44.851939Z", "number": "18", "summary": "NCSC Score updated." }, { "date": "2026-03-30T16:11:43.118198Z", "number": "19", "summary": "Description removed for source.| Description created for source.| References created (3).| CWES updated (1)." }, { "date": "2026-03-30T16:11:46.749882Z", "number": "20", "summary": "NCSC Score updated." } ], "status": "interim", "version": "20" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-5207390", "product_identification_helper": { "cpe": "cpe:/a:redhat:external_secrets_operator:1" } } } ], "category": "product_name", "name": "External Secrets Operator for Red Hat OpenShift" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5474797", "product_identification_helper": { "cpe": "cpe:/a:redhat:lightspeed_core" } } } ], "category": "product_name", "name": "Lightspeed Core" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2524222", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_lightspeed" } } } ], "category": "product_name", "name": "OpenShift Lightspeed" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-2858641", "product_identification_helper": { "cpe": "cpe:/a:redhat:ai_inference_server:3" } } } ], "category": "product_name", "name": "Red Hat AI Inference Server" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-1508257", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2" } } } ], "category": "product_name", "name": "Red Hat Ansible Automation Platform 2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-3023480", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_core:2" } } } ], "category": "product_name", "name": "Red Hat Ansible Automation Platform Ansible Core 2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-1508265", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhdh:1" } } } ], "category": "product_name", "name": "Red Hat Developer Hub" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/10", "product": { "name": "vers:rpm/10", "product_id": "CSAFPID-2858634", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-1439317", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/9", "product": { "name": "vers:rpm/9", "product_id": "CSAFPID-1439319", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-5198605", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux_ai:3" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux AI (RHEL AI) 3" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1439279", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_ai" } } } ], "category": "product_name", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-1439328", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4" } } } ], "category": "product_name", "name": "Red Hat OpenShift Container Platform 4" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/6", "product": { "name": "vers:rpm/6", "product_id": "CSAFPID-1439313", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6" } } } ], "category": "product_name", "name": "Red Hat Satellite 6" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-1441204", "product_identification_helper": { "cpe": "cpe:/a:redhat:trusted_artifact_signer:1" } } } ], "category": "product_name", "name": "Red Hat Trusted Artifact Signer" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5008757" } } ], "category": "product_name", "name": "ansible-dev-tools-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-4534156" } } ], "category": "product_name", "name": "automation-dashboard-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5172458" } } ], "category": "product_name", "name": "controller-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5172459" } } ], "category": "product_name", "name": "eda-controller-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2698058" } } ], "category": "product_name", "name": "ee-minimal-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2698059" } } ], "category": "product_name", "name": "ee-supported-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2518221" } } ], "category": "product_name", "name": "ee-supported-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5172461" } } ], "category": "product_name", "name": "hub-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5035448" } } ], "category": "product_name", "name": "lightspeed-chatbot-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1508261" } } ], "category": "product_name", "name": "lightspeed-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5009266" } } ], "category": "product_name", "name": "lightspeed-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5150731" } } ], "category": "product_name", "name": "mcp-tools-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5008758" } } ], "category": "product_name", "name": "platform-resource-runner-rhel9" } ], "category": "product_family", "name": "Red Hat Ansible Automation Platform 2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5264795" } } ], "category": "product_name", "name": "bitwarden-sdk-server-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5264796" } } ], "category": "product_name", "name": "external-secrets-operator-bundle" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5264797" } } ], "category": "product_name", "name": "external-secrets-operator-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5207391" } } ], "category": "product_name", "name": "external-secrets-rhel9" } ], "category": "product_family", "name": "External Secrets Operator for Red Hat OpenShift" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5206383" } } ], "category": "product_name", "name": "bootc-aws-cuda-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5206384" } } ], "category": "product_name", "name": "bootc-azure-cuda-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811347" } } ], "category": "product_name", "name": "bootc-azure-rocm-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5205180" } } ], "category": "product_name", "name": "bootc-cuda-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5198606" } } ], "category": "product_name", "name": "bootc-gcp-cuda-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811351" } } ], "category": "product_name", "name": "bootc-rocm-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5205182" } } ], "category": "product_name", "name": "disk-image-cuda-rhel9" } ], "category": "product_family", "name": "Red Hat Enterprise Linux AI (RHEL AI) 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5505893" } } ], "category": "product_name", "name": "dataverse-exporter-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5474798" } } ], "category": "product_name", "name": "lightspeed-stack-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5826731" } } ], "category": "product_name", "name": "rag-tool-rhel9" } ], "category": "product_family", "name": "Lightspeed Core" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3093049" } } ], "category": "product_name", "name": "ee-minimal-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-4534157" } } ], "category": "product_name", "name": "ee-minimal-rhel9" } ], "category": "product_family", "name": "Red Hat Ansible Automation Platform Ansible Core 2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222639" } } ], "category": "product_name", "name": "foreman-mcp-server-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2855768" } } ], "category": "product_name", "name": "iop-advisor-engine-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276234" } } ], "category": "product_name", "name": "iop-host-inventory-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276235" } } ], "category": "product_name", "name": "iop-insights-engine-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276236" } } ], "category": "product_name", "name": "iop-puptoo-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5458000" } } ], "category": "product_name", "name": "iop-vmaas-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276237" } } ], "category": "product_name", "name": "iop-vulnerability-engine-rhel9" } ], "category": "product_family", "name": "Red Hat Satellite 6" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222641" } } ], "category": "product_name", "name": "lightspeed-ocp-rag-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1508255" } } ], "category": "product_name", "name": "lightspeed-service-api-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5448444" } } ], "category": "product_name", "name": "lightspeed-to-dataverse-exporter-rhel9" } ], "category": "product_family", "name": "OpenShift Lightspeed" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5119831" } } ], "category": "product_name", "name": "model-transparency-rhel9" } ], "category": "product_family", "name": "Red Hat Trusted Artifact Signer" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276221" } } ], "category": "product_name", "name": "odh-caikit-nlp-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276222" } } ], "category": "product_name", "name": "odh-caikit-tgis-serving-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2976378" } } ], "category": "product_name", "name": "odh-feature-server-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5119808" } } ], "category": "product_name", "name": "odh-kserve-agent-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5119810" } } ], "category": "product_name", "name": "odh-kserve-controller-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5119811" } } ], "category": "product_name", "name": "odh-kserve-router-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5119813" } } ], "category": "product_name", "name": "odh-kserve-storage-initializer-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3112099" } } ], "category": "product_name", "name": "odh-llama-stack-core-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811359" } } ], "category": "product_name", "name": "odh-mlflow-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276224" } } ], "category": "product_name", "name": "odh-model-registry-job-async-upload-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1441106" } } ], "category": "product_name", "name": "odh-model-registry-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3036146" } } ], "category": "product_name", "name": "odh-modelmesh-runtime-adapter-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276225" } } ], "category": "product_name", "name": "odh-openvino-model-server-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068100" } } ], "category": "product_name", "name": "odh-pipeline-runtime-datascience-cpu-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068103" } } ], "category": "product_name", "name": "odh-pipeline-runtime-minimal-cpu-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068105" } } ], "category": "product_name", "name": "odh-pipeline-runtime-pytorch-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222767" } } ], "category": "product_name", "name": "odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068108" } } ], "category": "product_name", "name": "odh-pipeline-runtime-pytorch-rocm-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068110" } } ], "category": "product_name", "name": "odh-pipeline-runtime-tensorflow-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5155537" } } ], "category": "product_name", "name": "odh-pipeline-runtime-tensorflow-rocm-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276227" } } ], "category": "product_name", "name": "odh-training-cuda121-torch24-py311-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276228" } } ], "category": "product_name", "name": "odh-training-cuda124-torch25-py311-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276229" } } ], "category": "product_name", "name": "odh-training-cuda128-torch28-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5830423" } } ], "category": "product_name", "name": "odh-training-cuda128-torch29-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276230" } } ], "category": "product_name", "name": "odh-training-rocm62-torch24-py311-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276231" } } ], "category": "product_name", "name": "odh-training-rocm62-torch25-py311-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5276232" } } ], "category": "product_name", "name": "odh-training-rocm64-torch28-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5834016" } } ], "category": "product_name", "name": "odh-training-rocm64-torch29-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811362" } } ], "category": "product_name", "name": "odh-trustyai-garak-lls-provider-dsp-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5834017" } } ], "category": "product_name", "name": "odh-trustyai-nemo-guardrails-server-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5206387" } } ], "category": "product_name", "name": "odh-vllm-cpu-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5206388" } } ], "category": "product_name", "name": "odh-vllm-cuda-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5206389" } } ], "category": "product_name", "name": "odh-vllm-gaudi-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5206390" } } ], "category": "product_name", "name": "odh-vllm-rocm-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068114" } } ], "category": "product_name", "name": "odh-workbench-codeserver-datascience-cpu-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068116" } } ], "category": "product_name", "name": "odh-workbench-jupyter-datascience-cpu-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068119" } } ], "category": "product_name", "name": "odh-workbench-jupyter-minimal-cpu-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068121" } } ], "category": "product_name", "name": "odh-workbench-jupyter-minimal-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068123" } } ], "category": "product_name", "name": "odh-workbench-jupyter-minimal-rocm-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068126" } } ], "category": "product_name", "name": "odh-workbench-jupyter-pytorch-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222780" } } ], "category": "product_name", "name": "odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068128" } } ], "category": "product_name", "name": "odh-workbench-jupyter-pytorch-rocm-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068131" } } ], "category": "product_name", "name": "odh-workbench-jupyter-tensorflow-cuda-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5155538" } } ], "category": "product_name", "name": "odh-workbench-jupyter-tensorflow-rocm-py312-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068134" } } ], "category": "product_name", "name": "odh-workbench-jupyter-trustyai-cpu-py312-rhel9" } ], "category": "product_family", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2733645" } } ], "category": "product_name", "name": "ose-agent-installer-api-server-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2257535" } } ], "category": "product_name", "name": "ose-olm-catalogd-rhel9" } ], "category": "product_family", "name": "Red Hat OpenShift Container Platform 4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2909332" } } ], "category": "product_name", "name": "python-pip" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5891536" } } ], "category": "product_name", "name": "python3.14-pip" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2909377" } } ], "category": "product_name", "name": "python3.11-pip" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2909378" } } ], "category": "product_name", "name": "python3.12-pip" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2909381" } } ], "category": "product_name", "name": "resource-agents" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2909382" } } ], "category": "product_name", "name": "python3.11-pip" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2909383" } } ], "category": "product_name", "name": "python3.12-pip" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5891540" } } ], "category": "product_name", "name": "python3.14-pip" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1508266" } } ], "category": "product_name", "name": "rhdh-hub-rhel9" } ], "category": "product_family", "name": "Red Hat Developer Hub" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811320" } } ], "category": "product_name", "name": "vllm-cpu-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2858642" } } ], "category": "product_name", "name": "vllm-cuda-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5826732" } } ], "category": "product_name", "name": "vllm-neuron-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2858643" } } ], "category": "product_name", "name": "vllm-rocm-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5008756" } } ], "category": "product_name", "name": "vllm-spyre-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3112098" } } ], "category": "product_name", "name": "vllm-tpu-rhel9" } ], "category": "product_family", "name": "Red Hat AI Inference Server" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.10", "product": { "name": "vers:unknown/0.10", "product_id": "CSAFPID-4200749", "product_identification_helper": { "purl": "pkg:pypi/pygments@0.10" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11", "product": { "name": "vers:unknown/0.11", "product_id": "CSAFPID-4200750", "product_identification_helper": { "purl": "pkg:pypi/pygments@0.11" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.1", "product": { "name": "vers:unknown/0.11.1", "product_id": "CSAFPID-4200751", "product_identification_helper": { "purl": "pkg:pypi/pygments@0.11.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5", "product": { "name": "vers:unknown/0.5", "product_id": "CSAFPID-4200752", "product_identification_helper": { "purl": "pkg:pypi/pygments@0.5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.1", "product": { "name": "vers:unknown/0.5.1", "product_id": "CSAFPID-4200753", "product_identification_helper": { "purl": "pkg:pypi/pygments@0.5.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.6", "product": { "name": "vers:unknown/0.6", "product_id": "CSAFPID-4200754", "product_identification_helper": { "purl": "pkg:pypi/pygments@0.6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.7", "product": { "name": "vers:unknown/0.7", "product_id": "CSAFPID-4200755", "product_identification_helper": { "purl": "pkg:pypi/pygments@0.7" } } }, { "category": "product_version_range", "name": "vers:unknown/0.7.1", "product": { "name": "vers:unknown/0.7.1", "product_id": "CSAFPID-4200756", "product_identification_helper": { "purl": "pkg:pypi/pygments@0.7.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8", "product": { "name": "vers:unknown/0.8", "product_id": "CSAFPID-4200757", "product_identification_helper": { "purl": "pkg:pypi/pygments@0.8" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8.1", "product": { "name": "vers:unknown/0.8.1", "product_id": "CSAFPID-4200758", "product_identification_helper": { "purl": "pkg:pypi/pygments@0.8.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.9", "product": { "name": "vers:unknown/0.9", "product_id": "CSAFPID-4200759", "product_identification_helper": { "purl": "pkg:pypi/pygments@0.9" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0", "product": { "name": "vers:unknown/1.0", "product_id": "CSAFPID-4200760", "product_identification_helper": { "purl": "pkg:pypi/pygments@1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1", "product": { "name": "vers:unknown/1.1", "product_id": "CSAFPID-669775", "product_identification_helper": { "purl": "pkg:pypi/pygments@1.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.1", "product": { "name": "vers:unknown/1.1.1", "product_id": "CSAFPID-3705559", "product_identification_helper": { "purl": "pkg:pypi/pygments@1.1.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2", "product": { "name": "vers:unknown/1.2", "product_id": "CSAFPID-3705560", "product_identification_helper": { "purl": "pkg:pypi/pygments@1.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.1", "product": { "name": "vers:unknown/1.2.1", "product_id": "CSAFPID-3705561", "product_identification_helper": { "purl": "pkg:pypi/pygments@1.2.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.2", "product": { "name": "vers:unknown/1.2.2", "product_id": "CSAFPID-266038", "product_identification_helper": { "cpe": "cpe:2.3:a:pygments:pygments:1.2.2:*:*:*:*:*:*:*", "purl": "pkg:pypi/pygments@1.2.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3", "product": { "name": "vers:unknown/1.3", "product_id": "CSAFPID-266039", "product_identification_helper": { "cpe": "cpe:2.3:a:pygments:pygments:1.3:*:*:*:*:*:*:*", "purl": "pkg:pypi/pygments@1.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.1", "product": { "name": "vers:unknown/1.3.1", "product_id": "CSAFPID-266036", "product_identification_helper": { "cpe": "cpe:2.3:a:pygments:pygments:1.3.1:*:*:*:*:*:*:*", "purl": "pkg:pypi/pygments@1.3.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4", "product": { "name": "vers:unknown/1.4", "product_id": "CSAFPID-266034", "product_identification_helper": { "cpe": "cpe:2.3:a:pygments:pygments:1.4:*:*:*:*:*:*:*", "purl": "pkg:pypi/pygments@1.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5", "product": { "name": "vers:unknown/1.5", "product_id": "CSAFPID-266033", "product_identification_helper": { "cpe": "cpe:2.3:a:pygments:pygments:1.5:*:*:*:*:*:*:*", "purl": "pkg:pypi/pygments@1.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.6", "product": { "name": "vers:unknown/1.6", "product_id": "CSAFPID-266037", "product_identification_helper": { "cpe": "cpe:2.3:a:pygments:pygments:1.6:*:*:*:*:*:*:*", "purl": "pkg:pypi/pygments@1.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.6rc1", "product": { "name": "vers:unknown/1.6rc1", "product_id": "CSAFPID-3251818", "product_identification_helper": { "purl": "pkg:pypi/pygments@1.6rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.0", "product": { "name": "vers:unknown/2.0", "product_id": "CSAFPID-266035", "product_identification_helper": { "cpe": "cpe:2.3:a:pygments:pygments:2.0:*:*:*:*:*:*:*", "purl": "pkg:pypi/pygments@2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.0.1", "product": { "name": "vers:unknown/2.0.1", "product_id": "CSAFPID-266040", "product_identification_helper": { "cpe": "cpe:2.3:a:pygments:pygments:2.0.1:*:*:*:*:*:*:*", "purl": "pkg:pypi/pygments@2.0.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.0.2", "product": { "name": "vers:unknown/2.0.2", "product_id": "CSAFPID-3251819", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.0rc1", "product": { "name": "vers:unknown/2.0rc1", "product_id": "CSAFPID-3251820", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.0rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.1", "product": { "name": "vers:unknown/2.1", "product_id": "CSAFPID-846288", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.1.1", "product": { "name": "vers:unknown/2.1.1", "product_id": "CSAFPID-3705562", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.1.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.1.2", "product": { "name": "vers:unknown/2.1.2", "product_id": "CSAFPID-3705563", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.1.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.1.3", "product": { "name": "vers:unknown/2.1.3", "product_id": "CSAFPID-3705564", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.1.3" } } }, { "category": "product_version_range", "name": "vers:unknown/2.10.0", "product": { "name": "vers:unknown/2.10.0", "product_id": "CSAFPID-4200761", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.10.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.11.0", "product": { "name": "vers:unknown/2.11.0", "product_id": "CSAFPID-4200762", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.11.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.11.1", "product": { "name": "vers:unknown/2.11.1", "product_id": "CSAFPID-4200763", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.11.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.11.2", "product": { "name": "vers:unknown/2.11.2", "product_id": "CSAFPID-4200764", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.11.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.12.0", "product": { "name": "vers:unknown/2.12.0", "product_id": "CSAFPID-4200765", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.12.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.13.0", "product": { "name": "vers:unknown/2.13.0", "product_id": "CSAFPID-4200766", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.13.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.14.0", "product": { "name": "vers:unknown/2.14.0", "product_id": "CSAFPID-4200767", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.14.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.15.0", "product": { "name": "vers:unknown/2.15.0", "product_id": "CSAFPID-4200768", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.15.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.15.1", "product": { "name": "vers:unknown/2.15.1", "product_id": "CSAFPID-5907983", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.15.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.16.0", "product": { "name": "vers:unknown/2.16.0", "product_id": "CSAFPID-5907984", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.16.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.16.1", "product": { "name": "vers:unknown/2.16.1", "product_id": "CSAFPID-5907985", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.16.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.17.0", "product": { "name": "vers:unknown/2.17.0", "product_id": "CSAFPID-5907986", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.17.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.17.1", "product": { "name": "vers:unknown/2.17.1", "product_id": "CSAFPID-5907987", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.17.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.17.2", "product": { "name": "vers:unknown/2.17.2", "product_id": "CSAFPID-5907988", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.17.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.18.0", "product": { "name": "vers:unknown/2.18.0", "product_id": "CSAFPID-5907989", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.18.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.19.0", "product": { "name": "vers:unknown/2.19.0", "product_id": "CSAFPID-5885079", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.19.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.19.1", "product": { "name": "vers:unknown/2.19.1", "product_id": "CSAFPID-5885080", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.19.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.19.2", "product": { "name": "vers:unknown/2.19.2", "product_id": "CSAFPID-5885081", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.19.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.2.0", "product": { "name": "vers:unknown/2.2.0", "product_id": "CSAFPID-3705565", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.3.0", "product": { "name": "vers:unknown/2.3.0", "product_id": "CSAFPID-3705566", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.3.1", "product": { "name": "vers:unknown/2.3.1", "product_id": "CSAFPID-3705567", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.3.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.0", "product": { "name": "vers:unknown/2.4.0", "product_id": "CSAFPID-3705568", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.1", "product": { "name": "vers:unknown/2.4.1", "product_id": "CSAFPID-3705569", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.2", "product": { "name": "vers:unknown/2.4.2", "product_id": "CSAFPID-3705570", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.4.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.5.1", "product": { "name": "vers:unknown/2.5.1", "product_id": "CSAFPID-3705571", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.5.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.5.2", "product": { "name": "vers:unknown/2.5.2", "product_id": "CSAFPID-3705572", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.5.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.6.0", "product": { "name": "vers:unknown/2.6.0", "product_id": "CSAFPID-3705573", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.6.1", "product": { "name": "vers:unknown/2.6.1", "product_id": "CSAFPID-3705574", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.6.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.7.0", "product": { "name": "vers:unknown/2.7.0", "product_id": "CSAFPID-3705575", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.7.1", "product": { "name": "vers:unknown/2.7.1", "product_id": "CSAFPID-3705576", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.7.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.7.2", "product": { "name": "vers:unknown/2.7.2", "product_id": "CSAFPID-3705577", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.7.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.7.3", "product": { "name": "vers:unknown/2.7.3", "product_id": "CSAFPID-624853", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.7.3" } } }, { "category": "product_version_range", "name": "vers:unknown/2.7.4", "product": { "name": "vers:unknown/2.7.4", "product_id": "CSAFPID-4200770", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.7.4" } } }, { "category": "product_version_range", "name": "vers:unknown/2.8.0", "product": { "name": "vers:unknown/2.8.0", "product_id": "CSAFPID-4200771", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.8.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.8.1", "product": { "name": "vers:unknown/2.8.1", "product_id": "CSAFPID-4781970", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.8.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.9.0", "product": { "name": "vers:unknown/2.9.0", "product_id": "CSAFPID-4200772", "product_identification_helper": { "purl": "pkg:pypi/pygments@2.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<=2.19.2", "product": { "name": "vers:unknown/>=0|<=2.19.2", "product_id": "CSAFPID-5907990" } } ], "category": "product_name", "name": "Pygments" } ], "category": "vendor", "name": "Pygments" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/unknown", "product": { "name": "vers:deb/unknown", "product_id": "CSAFPID-1405326" } } ], "category": "product_name", "name": "pygments" } ], "category": "product_family", "name": "bookworm" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/unknown", "product": { "name": "vers:deb/unknown", "product_id": "CSAFPID-1405327" } } ], "category": "product_name", "name": "pygments" } ], "category": "product_family", "name": "bullseye" } ], "category": "vendor", "name": "Debian" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-4539", "cwe": { "id": "CWE-1333", "name": "Inefficient Regular Expression Complexity" }, "notes": [ { "category": "description", "text": "A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.", "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-4539" }, { "category": "description", "text": "A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.", "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/4xxx/CVE-2026-4539.json" }, { "category": "description", "text": "A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.", "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-4539" }, { "category": "description", "text": "A flaw was found in pygments. A local user can exploit this vulnerability by providing specially crafted input to the AdlLexer function, which leads to inefficient regular expression processing. This can result in a Denial of Service (DoS), making the application unresponsive.", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-4539.json" }, { "category": "description", "text": "A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-5239-wwwm-4pmq.json?alt=media" }, { "category": "description", "text": "A security flaw has been discovered in pygments before 2.20.0. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.", "title": "github - https://api.github.com/advisories/GHSA-5239-wwwm-4pmq" }, { "category": "other", "text": "0.00013", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" }, { "category": "other", "text": "1.9", "title": "CVSSV4 base score" }, { "category": "other", "text": "3.2", "title": "NCSC Score" }, { "category": "other", "text": "Is related to (a version of) an uncommon product", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "There is exploit data available from source Cveprojectv5, The value of the most recent CVSS (V3) score, Exploit code publicly available, There is cwe data available from source Nvd", "title": "NCSC Score top decreasing factors" }, { "category": "details", "text": "Severity: 1\n", "title": "Vendor assessment" } ], "product_status": { "known_affected": [ "CSAFPID-1405326", "CSAFPID-1405327", "CSAFPID-1439279", "CSAFPID-1439313", "CSAFPID-1439319", "CSAFPID-1439328", "CSAFPID-1441204", "CSAFPID-1508255", "CSAFPID-1508257", "CSAFPID-2257535", "CSAFPID-2518221", "CSAFPID-2524222", "CSAFPID-2698059", "CSAFPID-2858634", "CSAFPID-2858641", "CSAFPID-2858642", "CSAFPID-2858643", "CSAFPID-2976378", "CSAFPID-3023480", "CSAFPID-3036146", "CSAFPID-3093049", "CSAFPID-3112098", "CSAFPID-3112099", "CSAFPID-4534156", "CSAFPID-4534157", "CSAFPID-5008756", "CSAFPID-5009266", "CSAFPID-5035448", "CSAFPID-5068100", "CSAFPID-5068103", "CSAFPID-5068105", "CSAFPID-5068108", "CSAFPID-5068110", "CSAFPID-5068114", "CSAFPID-5068116", "CSAFPID-5068119", "CSAFPID-5068121", "CSAFPID-5068123", "CSAFPID-5068126", "CSAFPID-5068128", "CSAFPID-5068131", "CSAFPID-5068134", "CSAFPID-5119808", "CSAFPID-5119810", "CSAFPID-5119811", "CSAFPID-5119813", "CSAFPID-5119831", "CSAFPID-5150731", "CSAFPID-5155537", "CSAFPID-5155538", "CSAFPID-5172458", "CSAFPID-5172459", "CSAFPID-5172461", "CSAFPID-5198605", "CSAFPID-5198606", "CSAFPID-5205180", "CSAFPID-5206383", "CSAFPID-5206384", "CSAFPID-5206387", "CSAFPID-5206388", "CSAFPID-5206389", "CSAFPID-5206390", "CSAFPID-5207390", "CSAFPID-5207391", "CSAFPID-5222639", "CSAFPID-5222641", "CSAFPID-5222767", "CSAFPID-5222780", "CSAFPID-5264795", "CSAFPID-5264796", "CSAFPID-5264797", "CSAFPID-5276221", "CSAFPID-5276224", "CSAFPID-5276225", "CSAFPID-5276227", "CSAFPID-5276228", "CSAFPID-5276229", "CSAFPID-5276230", "CSAFPID-5276231", "CSAFPID-5276232", "CSAFPID-5276234", "CSAFPID-5276236", "CSAFPID-5276237", "CSAFPID-5448444", "CSAFPID-5458000", "CSAFPID-5474797", "CSAFPID-5474798", "CSAFPID-5505893", "CSAFPID-5811320", "CSAFPID-5811347", "CSAFPID-5811351", "CSAFPID-5811359", "CSAFPID-5811362", "CSAFPID-5826731", "CSAFPID-5826732", "CSAFPID-5830423", "CSAFPID-5834016", "CSAFPID-5834017", "CSAFPID-5891536", "CSAFPID-5891540", "CSAFPID-266033", "CSAFPID-266034", "CSAFPID-266035", "CSAFPID-266036", "CSAFPID-266037", "CSAFPID-266038", "CSAFPID-266039", "CSAFPID-266040", "CSAFPID-624853", "CSAFPID-669775", "CSAFPID-846288", "CSAFPID-3251818", "CSAFPID-3251819", "CSAFPID-3251820", "CSAFPID-3705559", "CSAFPID-3705560", "CSAFPID-3705561", "CSAFPID-3705562", "CSAFPID-3705563", "CSAFPID-3705564", "CSAFPID-3705565", "CSAFPID-3705566", "CSAFPID-3705567", "CSAFPID-3705568", "CSAFPID-3705569", "CSAFPID-3705570", "CSAFPID-3705571", "CSAFPID-3705572", "CSAFPID-3705573", "CSAFPID-3705574", "CSAFPID-3705575", "CSAFPID-3705576", "CSAFPID-3705577", "CSAFPID-4200749", "CSAFPID-4200750", "CSAFPID-4200751", "CSAFPID-4200752", "CSAFPID-4200753", "CSAFPID-4200754", "CSAFPID-4200755", "CSAFPID-4200756", "CSAFPID-4200757", "CSAFPID-4200758", "CSAFPID-4200759", "CSAFPID-4200760", "CSAFPID-4200761", "CSAFPID-4200762", "CSAFPID-4200763", "CSAFPID-4200764", "CSAFPID-4200765", "CSAFPID-4200766", "CSAFPID-4200767", "CSAFPID-4200768", "CSAFPID-4200770", "CSAFPID-4200771", "CSAFPID-4200772", "CSAFPID-4781970", "CSAFPID-5885079", "CSAFPID-5885080", "CSAFPID-5885081", "CSAFPID-5907983", "CSAFPID-5907984", "CSAFPID-5907985", "CSAFPID-5907986", "CSAFPID-5907987", "CSAFPID-5907988", "CSAFPID-5907989", "CSAFPID-5907990" ], "known_not_affected": [ "CSAFPID-1439317", "CSAFPID-1441106", "CSAFPID-1508261", "CSAFPID-1508265", "CSAFPID-1508266", "CSAFPID-2698058", "CSAFPID-2733645", "CSAFPID-2855768", "CSAFPID-2909332", "CSAFPID-2909377", "CSAFPID-2909378", "CSAFPID-2909381", "CSAFPID-2909382", "CSAFPID-2909383", "CSAFPID-5008757", "CSAFPID-5008758", "CSAFPID-5205182", "CSAFPID-5276222", "CSAFPID-5276235" ] }, "references": [ { "category": "external", "summary": "Source - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-4539" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/4xxx/CVE-2026-4539.json" }, { "category": "external", "summary": "Source - debian", "url": "https://security-tracker.debian.org/tracker/CVE-2026-4539" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-4539.json" }, { "category": "external", "summary": "Source - github", "url": "https://api.github.com/advisories/GHSA-5239-wwwm-4pmq" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-5239-wwwm-4pmq.json?alt=media" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; redhat", "url": "https://github.com/pygments/pygments/" }, { "category": "external", "summary": "Reference - github; nvd; osv; redhat", "url": "https://github.com/pygments/pygments/issues/3058" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://vuldb.com/?ctiid.352327" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://vuldb.com/?id.352327" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://vuldb.com/?submit.774685" }, { "category": "external", "summary": "Reference - redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-4539" }, { "category": "external", "summary": "Reference - github; osv; redhat", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4539" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/pygments/pygments" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/advisories/GHSA-5239-wwwm-4pmq" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/pygments/pygments/pull/3064" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/pygments/pygments/commit/24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/pygments/pygments/releases/tag/2.20.0" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.3, "baseSeverity": "LOW" }, "products": [ "CSAFPID-1405326", "CSAFPID-1405327", "CSAFPID-1439279", "CSAFPID-1439313", "CSAFPID-1439319", "CSAFPID-1439328", "CSAFPID-1441204", "CSAFPID-1508255", "CSAFPID-1508257", "CSAFPID-2257535", "CSAFPID-2518221", "CSAFPID-2524222", "CSAFPID-266033", "CSAFPID-266034", "CSAFPID-266035", "CSAFPID-266036", "CSAFPID-266037", "CSAFPID-266038", "CSAFPID-266039", "CSAFPID-266040", "CSAFPID-2698059", "CSAFPID-2858634", "CSAFPID-2858641", "CSAFPID-2858642", "CSAFPID-2858643", "CSAFPID-2976378", "CSAFPID-3023480", "CSAFPID-3036146", "CSAFPID-3093049", "CSAFPID-3112098", "CSAFPID-3112099", "CSAFPID-3251818", "CSAFPID-3251819", "CSAFPID-3251820", "CSAFPID-3705559", "CSAFPID-3705560", "CSAFPID-3705561", "CSAFPID-3705562", "CSAFPID-3705563", "CSAFPID-3705564", "CSAFPID-3705565", "CSAFPID-3705566", "CSAFPID-3705567", "CSAFPID-3705568", "CSAFPID-3705569", "CSAFPID-3705570", "CSAFPID-3705571", "CSAFPID-3705572", "CSAFPID-3705573", "CSAFPID-3705574", "CSAFPID-3705575", "CSAFPID-3705576", "CSAFPID-3705577", "CSAFPID-4200749", "CSAFPID-4200750", "CSAFPID-4200751", "CSAFPID-4200752", "CSAFPID-4200753", "CSAFPID-4200754", "CSAFPID-4200755", "CSAFPID-4200756", "CSAFPID-4200757", "CSAFPID-4200758", "CSAFPID-4200759", "CSAFPID-4200760", "CSAFPID-4200761", "CSAFPID-4200762", "CSAFPID-4200763", "CSAFPID-4200764", "CSAFPID-4200765", "CSAFPID-4200766", "CSAFPID-4200767", "CSAFPID-4200768", "CSAFPID-4200770", "CSAFPID-4200771", "CSAFPID-4200772", "CSAFPID-4534156", "CSAFPID-4534157", "CSAFPID-4781970", "CSAFPID-5008756", "CSAFPID-5009266", "CSAFPID-5035448", "CSAFPID-5068100", "CSAFPID-5068103", "CSAFPID-5068105", "CSAFPID-5068108", "CSAFPID-5068110", "CSAFPID-5068114", "CSAFPID-5068116", "CSAFPID-5068119", "CSAFPID-5068121", "CSAFPID-5068123", "CSAFPID-5068126", "CSAFPID-5068128", "CSAFPID-5068131", "CSAFPID-5068134", "CSAFPID-5119808", "CSAFPID-5119810", "CSAFPID-5119811", "CSAFPID-5119813", "CSAFPID-5119831", "CSAFPID-5150731", "CSAFPID-5155537", "CSAFPID-5155538", "CSAFPID-5172458", "CSAFPID-5172459", "CSAFPID-5172461", "CSAFPID-5198605", "CSAFPID-5198606", "CSAFPID-5205180", "CSAFPID-5206383", "CSAFPID-5206384", "CSAFPID-5206387", "CSAFPID-5206388", "CSAFPID-5206389", "CSAFPID-5206390", "CSAFPID-5207390", "CSAFPID-5207391", "CSAFPID-5222639", "CSAFPID-5222641", "CSAFPID-5222767", "CSAFPID-5222780", "CSAFPID-5264795", "CSAFPID-5264796", "CSAFPID-5264797", "CSAFPID-5276221", "CSAFPID-5276224", "CSAFPID-5276225", "CSAFPID-5276227", "CSAFPID-5276228", "CSAFPID-5276229", "CSAFPID-5276230", "CSAFPID-5276231", "CSAFPID-5276232", "CSAFPID-5276234", "CSAFPID-5276236", "CSAFPID-5276237", "CSAFPID-5448444", "CSAFPID-5458000", "CSAFPID-5474797", "CSAFPID-5474798", "CSAFPID-5505893", "CSAFPID-5811320", "CSAFPID-5811347", "CSAFPID-5811351", "CSAFPID-5811359", "CSAFPID-5811362", "CSAFPID-5826731", "CSAFPID-5826732", "CSAFPID-5830423", "CSAFPID-5834016", "CSAFPID-5834017", "CSAFPID-5885079", "CSAFPID-5885080", "CSAFPID-5885081", "CSAFPID-5891536", "CSAFPID-5891540", "CSAFPID-5907983", "CSAFPID-5907984", "CSAFPID-5907985", "CSAFPID-5907986", "CSAFPID-5907987", "CSAFPID-5907988", "CSAFPID-5907989", "CSAFPID-5907990", "CSAFPID-624853", "CSAFPID-669775", "CSAFPID-846288" ] } ], "title": "CVE-2026-4539" } ] }