{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-59879", "tracking": { "current_release_date": "2026-10-16T10:42:29.419878Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-59879", "initial_release_date": "2026-07-08T17:07:19.046765Z", "revision_history": [ { "date": "2026-07-08T17:07:19.046765Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (2).| References created (5).| CWES updated (1)." }, { "date": "2026-07-08T17:07:25.013741Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-07-08T17:27:52.328499Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (5).| CWES updated (1)." }, { "date": "2026-07-08T17:27:54.025487Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-07-08T20:43:05.471410Z", "number": "5", "summary": "Unknown change." }, { "date": "2026-07-09T06:15:26.637018Z", "number": "6", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (86).| References created (7).| CWES updated (1)." }, { "date": "2026-07-09T06:44:51.730245Z", "number": "7", "summary": "Source created.| CVE status created. (valid)| Description created for source.| Products connected (2)." }, { "date": "2026-07-09T06:44:53.450326Z", "number": "8", "summary": "NCSC Score updated." }, { "date": "2026-07-09T16:37:22.503409Z", "number": "9", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-07-09T16:37:26.028614Z", "number": "10", "summary": "NCSC Score updated." }, { "date": "2026-07-10T06:43:01.853050Z", "number": "11", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (14).| Product Identifiers created (9).| References created (3)." }, { "date": "2026-07-10T19:31:12.075478Z", "number": "12", "summary": "CVSS created.| Products connected (2).| Product Identifiers created (2).| Exploits created (1)." }, { "date": "2026-07-10T19:31:18.834086Z", "number": "13", "summary": "NCSC Score updated." }, { "date": "2026-07-13T19:10:03.902871Z", "number": "14", "summary": "CVSS created." }, { "date": "2026-07-21T19:08:51.115370Z", "number": "15", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (7).| CWES updated (1)." }, { "date": "2026-07-21T19:08:55.429883Z", "number": "16", "summary": "NCSC Score updated." }, { "date": "2026-07-22T00:23:45.195722Z", "number": "17", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| References created (6).| CWES updated (1)." }, { "date": "2026-07-24T14:28:01.051377Z", "number": "18", "summary": "EPSS updated." }, { "date": "2026-07-24T14:28:11.445040Z", "number": "19", "summary": "NCSC Score updated." }, { "date": "2026-07-24T23:28:15.863124Z", "number": "20", "summary": "NCSC Score updated." }, { "date": "2026-08-04T12:10:52.178709Z", "number": "21", "summary": "Source created.| CVE status created. (valid)| Products created (1).| References created (3)." }, { "date": "2026-08-04T12:10:56.286798Z", "number": "22", "summary": "NCSC Score updated." }, { "date": "2026-08-10T12:19:22.482145Z", "number": "23", "summary": "Products connected (1).| Product Identifiers created (1).| References created (1)." }, { "date": "2026-08-10T12:19:25.131322Z", "number": "24", "summary": "NCSC Score updated." }, { "date": "2026-08-19T15:16:43.706542Z", "number": "25", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-08-19T15:17:32.640959Z", "number": "26", "summary": "NCSC Score updated." }, { "date": "2026-08-24T15:12:37.974865Z", "number": "27", "summary": "EPSS updated." }, { "date": "2026-08-24T15:18:41.786646Z", "number": "28", "summary": "NCSC Score updated." }, { "date": "2026-09-01T21:40:46.788944Z", "number": "29", "summary": "Description removed for source.| Products removed (1)." }, { "date": "2026-09-02T02:03:58.079823Z", "number": "30", "summary": "Description created for source." }, { "date": "2026-09-02T10:26:16.071550Z", "number": "31", "summary": "EPSS updated." }, { "date": "2026-09-02T12:51:12.902219Z", "number": "32", "summary": "Products connected (1).| Product Identifiers created (1).| References created (1)." }, { "date": "2026-09-03T14:15:53.854900Z", "number": "33", "summary": "EPSS updated." }, { "date": "2026-09-03T18:40:14.448899Z", "number": "34", "summary": "EPSS updated." }, { "date": "2026-09-03T18:40:16.446032Z", "number": "35", "summary": "NCSC Score updated." }, { "date": "2026-09-04T15:24:30.150254Z", "number": "36", "summary": "EPSS updated." }, { "date": "2026-09-05T15:23:50.640885Z", "number": "37", "summary": "EPSS updated." }, { "date": "2026-09-06T15:24:20.783203Z", "number": "38", "summary": "EPSS updated." }, { "date": "2026-09-07T15:24:46.619501Z", "number": "39", "summary": "EPSS updated." }, { "date": "2026-09-08T04:40:01.220362Z", "number": "40", "summary": "NCSC Score updated." }, { "date": "2026-09-09T07:18:06.773339Z", "number": "41", "summary": "EPSS updated." }, { "date": "2026-09-09T15:28:20.177446Z", "number": "42", "summary": "EPSS updated." }, { "date": "2026-09-09T15:28:22.236839Z", "number": "43", "summary": "NCSC Score updated." }, { "date": "2026-09-11T11:02:38.488941Z", "number": "44", "summary": "Products connected (1).| Product Identifiers created (1).| References created (1)." }, { "date": "2026-09-13T19:25:27.635848Z", "number": "45", "summary": "Description removed for source.| Description created for source." }, { "date": "2026-09-16T12:01:14.461417Z", "number": "46", "summary": "Source connected.| CVE status created. (valid)| Products connected (17).| References created (3)." }, { "date": "2026-09-16T12:01:19.306006Z", "number": "47", "summary": "NCSC Score updated." }, { "date": "2026-09-16T15:16:11.213031Z", "number": "48", "summary": "EPSS updated." }, { "date": "2026-09-16T15:16:18.164329Z", "number": "49", "summary": "NCSC Score updated." }, { "date": "2026-09-17T00:21:05.576118Z", "number": "50", "summary": "Products created (1).| Products connected (1).| Products removed (1).| References created (1)." }, { "date": "2026-09-17T13:09:01.184679Z", "number": "51", "summary": "Products connected (1).| References created (4)." }, { "date": "2026-09-17T13:09:07.826842Z", "number": "52", "summary": "NCSC Score updated." }, { "date": "2026-09-18T08:19:07.027373Z", "number": "53", "summary": "References created (6)." }, { "date": "2026-09-18T08:19:09.742709Z", "number": "54", "summary": "NCSC Score updated." }, { "date": "2026-09-22T00:37:35.640728Z", "number": "55", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (11).| Product Remediations created (13).| Product Identifiers created (19).| Product Identifiers removed (19).| References created (53).| CWES updated (1)." }, { "date": "2026-09-22T00:37:49.495005Z", "number": "56", "summary": "NCSC Score updated." }, { "date": "2026-09-22T00:39:56.376009Z", "number": "57", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (3).| Product Remediations created (5).| Product Identifiers created (4).| Product Identifiers removed (4).| References created (20).| CWES updated (1)." }, { "date": "2026-09-23T14:58:33.377252Z", "number": "58", "summary": "References created (1)." }, { "date": "2026-09-24T13:27:57.094337Z", "number": "59", "summary": "References created (4)." }, { "date": "2026-09-24T13:27:59.733285Z", "number": "60", "summary": "NCSC Score updated." }, { "date": "2026-09-24T15:34:05.972235Z", "number": "61", "summary": "EPSS updated." }, { "date": "2026-09-25T10:31:13.240566Z", "number": "62", "summary": "References created (2)." }, { "date": "2026-09-29T12:20:36.879677Z", "number": "63", "summary": "Source connected.| CVE status created. (valid)| Products connected (3).| References created (21)." }, { "date": "2026-09-29T12:34:57.449326Z", "number": "64", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (31).| Product Remediations created (33).| Product Identifiers created (120).| Product Identifiers removed (120).| References created (23).| CWES updated (1)." }, { "date": "2026-09-29T12:35:22.615252Z", "number": "65", "summary": "NCSC Score updated." }, { "date": "2026-09-29T12:37:21.634275Z", "number": "66", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (28).| Product Remediations created (30).| Product Identifiers created (108).| Product Identifiers removed (108).| References created (22).| CWES updated (1)." }, { "date": "2026-09-29T12:52:21.089893Z", "number": "67", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (28).| Product Remediations created (30).| Product Identifiers created (108).| Product Identifiers removed (108).| References created (24).| CWES updated (1)." }, { "date": "2026-09-29T13:29:20.796538Z", "number": "68", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| Product Remediations created (4).| References created (28).| CWES updated (1)." }, { "date": "2026-09-29T15:40:19.289075Z", "number": "69", "summary": "EPSS created.| Unknown change." }, { "date": "2026-10-02T00:41:51.691170Z", "number": "70", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (32).| Product Identifiers created (29).| Product Identifiers removed (29).| Product Remediations created (47).| References created (18).| CWES updated (1)." }, { "date": "2026-10-02T00:42:04.593333Z", "number": "71", "summary": "NCSC Score updated." }, { "date": "2026-10-02T11:33:53.325010Z", "number": "72", "summary": "References created (3)." }, { "date": "2026-10-02T11:34:07.034173Z", "number": "73", "summary": "NCSC Score updated." }, { "date": "2026-10-05T11:52:37.420213Z", "number": "74", "summary": "References created (1)." }, { "date": "2026-10-05T11:52:40.663489Z", "number": "75", "summary": "NCSC Score updated." }, { "date": "2026-10-07T00:29:02.797305Z", "number": "76", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (46).| Product Remediations created (48).| Product Identifiers created (170).| Product Identifiers removed (170).| References created (14).| CWES updated (1)." }, { "date": "2026-10-07T00:29:23.098506Z", "number": "77", "summary": "NCSC Score updated." }, { "date": "2026-10-08T00:28:21.498205Z", "number": "78", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (48).| Product Remediations created (50).| Product Identifiers created (169).| Product Identifiers removed (169).| References created (17).| CWES updated (1)." }, { "date": "2026-10-08T00:28:41.956685Z", "number": "79", "summary": "NCSC Score updated." }, { "date": "2026-10-08T00:30:30.037194Z", "number": "80", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (11).| Product Remediations created (13).| Product Identifiers created (18).| Product Identifiers removed (18).| References created (26).| CWES updated (1)." }, { "date": "2026-10-09T12:15:51.322167Z", "number": "81", "summary": "References created (1)." }, { "date": "2026-10-09T12:15:57.425923Z", "number": "82", "summary": "NCSC Score updated." }, { "date": "2026-10-09T12:27:53.132926Z", "number": "83", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (11).| Product Remediations created (13).| Product Identifiers created (24).| Product Identifiers removed (24).| References created (25).| CWES updated (1)." }, { "date": "2026-10-09T12:55:03.261123Z", "number": "84", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (11).| Product Remediations created (13).| Product Identifiers created (18).| Product Identifiers removed (18).| References created (23).| CWES updated (1)." }, { "date": "2026-10-13T13:28:49.862297Z", "number": "85", "summary": "References created (1)." }, { "date": "2026-10-13T13:28:53.316660Z", "number": "86", "summary": "NCSC Score updated." }, { "date": "2026-10-16T06:19:42.544772Z", "number": "87", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-10-16T06:19:53.837521Z", "number": "88", "summary": "NCSC Score updated." }, { "date": "2026-10-16T10:42:15.366543Z", "number": "89", "summary": "References created (2)." }, { "date": "2026-10-16T10:42:18.088285Z", "number": "90", "summary": "NCSC Score updated." } ], "status": "interim", "version": "90" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/data center lts <10.2.23", "product": { "name": "vers:unknown/data center lts <10.2.23", "product_id": "CSAFPID-9329666" } }, { "category": "product_version_range", "name": "vers:unknown/data center lts <12.1.11", "product": { "name": "vers:unknown/data center lts <12.1.11", "product_id": "CSAFPID-9329668" } } ], "category": "product_name", "name": "Bamboo" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/data center <10.4.2", "product": { "name": "vers:unknown/data center <10.4.2", "product_id": "CSAFPID-9012406" } }, { "category": "product_version_range", "name": "vers:unknown/data center <10.4.3", "product": { "name": "vers:unknown/data center <10.4.3", "product_id": "CSAFPID-9329670" } }, { "category": "product_version_range", "name": "vers:unknown/data center lts <10.2.6", "product": { "name": "vers:unknown/data center lts <10.2.6", "product_id": "CSAFPID-9012408" } }, { "category": "product_version_range", "name": "vers:unknown/data center lts <10.2.7", "product": { "name": "vers:unknown/data center lts <10.2.7", "product_id": "CSAFPID-9329676" } }, { "category": "product_version_range", "name": "vers:unknown/data center lts <9.4.24", "product": { "name": "vers:unknown/data center lts <9.4.24", "product_id": "CSAFPID-9329675" } } ], "category": "product_name", "name": "Bitbucket" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/data center lts <10.2.17", "product": { "name": "vers:unknown/data center lts <10.2.17", "product_id": "CSAFPID-9329678" } }, { "category": "product_version_range", "name": "vers:unknown/data center lts <10.2.18", "product": { "name": "vers:unknown/data center lts <10.2.18", "product_id": "CSAFPID-9329677" } }, { "category": "product_version_range", "name": "vers:unknown/data center lts <9.2.24", "product": { "name": "vers:unknown/data center lts <9.2.24", "product_id": "CSAFPID-9329665" } }, { "category": "product_version_range", "name": "vers:unknown/data center lts <9.2.25", "product": { "name": "vers:unknown/data center lts <9.2.25", "product_id": "CSAFPID-9329664" } } ], "category": "product_name", "name": "Confluence" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<4.9.14", "product": { "name": "vers:unknown/<4.9.14", "product_id": "CSAFPID-9329667" } } ], "category": "product_name", "name": "Crucible" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<4.9.14", "product": { "name": "vers:unknown/<4.9.14", "product_id": "CSAFPID-9329669" } } ], "category": "product_name", "name": "Fisheye" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/data center lts <10.3.25", "product": { "name": "vers:unknown/data center lts <10.3.25", "product_id": "CSAFPID-9329671" } }, { "category": "product_version_range", "name": "vers:unknown/data center lts <11.3.11", "product": { "name": "vers:unknown/data center lts <11.3.11", "product_id": "CSAFPID-9329672" } }, { "category": "product_version_range", "name": "vers:unknown/service management data center lts <10.3.25", "product": { "name": "vers:unknown/service management data center lts <10.3.25", "product_id": "CSAFPID-9329673" } }, { "category": "product_version_range", "name": "vers:unknown/service management data center lts <11.3.11", "product": { "name": "vers:unknown/service management data center lts <11.3.11", "product_id": "CSAFPID-9329674" } } ], "category": "product_name", "name": "Jira" } ], "category": "vendor", "name": "Atlassian" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<10.5.0.23", "product": { "name": "vers:unknown/<10.5.0.23", "product_id": "CSAFPID-9485661" } }, { "category": "product_version_range", "name": "vers:unknown/<10.6.0.11", "product": { "name": "vers:unknown/<10.6.0.11", "product_id": "CSAFPID-9485662" } }, { "category": "product_version_range", "name": "vers:unknown/<11.0.0.3", "product": { "name": "vers:unknown/<11.0.0.3", "product_id": "CSAFPID-9485663" } } ], "category": "product_name", "name": "DataPower Gateway" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1337768", "product_identification_helper": { "cpe": "cpe:/a:ibm:business_automation_workflow:-" } } } ], "category": "product_name", "name": "IBM Business Automation Workflow" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1331597", "product_identification_helper": { "cpe": "cpe:/a:ibm:operational_decision_manager:-" } } } ], "category": "product_name", "name": "IBM Operational Decision Manager" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1337765", "product_identification_helper": { "cpe": "cpe:/a:ibm:qradar_siem:-" } } } ], "category": "product_name", "name": "IBM QRadar SIEM" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/webgui 8.1.0 =0|<3.8.4", "product": { "name": "vers:unknown/>=0|<3.8.4", "product_id": "CSAFPID-9119849" } }, { "category": "product_version_range", "name": "vers:unknown/>=4.0.0-rc.1|<4.3.9", "product": { "name": "vers:unknown/>=4.0.0-rc.1|<4.3.9", "product_id": "CSAFPID-9332036" } }, { "category": "product_version_range", "name": "vers:unknown/>=5.0.0-beta.1|<5.1.8", "product": { "name": "vers:unknown/>=5.0.0-beta.1|<5.1.8", "product_id": "CSAFPID-8873354" } }, { "category": "product_version_range", "name": "vers:unknown/>=5.0.0|<5.1.8", "product": { "name": "vers:unknown/>=5.0.0|<5.1.8", "product_id": "CSAFPID-8619166", "product_identification_helper": { "cpe": "cpe:2.3:a:immutable-js:immutable:*:*:*:*:*:node.js:*:*" } } } ], "category": "product_name", "name": "immutable" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/2.0.10", "product": { "name": "vers:unknown/2.0.10", "product_id": "CSAFPID-8579330" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.11", "product": { "name": "vers:unknown/2.0.11", "product_id": "CSAFPID-8579329" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.12", "product": { "name": "vers:unknown/2.0.12", "product_id": "CSAFPID-8579328" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.13", "product": { "name": "vers:unknown/2.0.13", "product_id": "CSAFPID-8579327" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.14", "product": { "name": "vers:unknown/2.0.14", "product_id": "CSAFPID-8579326" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.15", "product": { "name": "vers:unknown/2.0.15", "product_id": "CSAFPID-8579325" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.16", "product": { "name": "vers:unknown/2.0.16", "product_id": "CSAFPID-8579324" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.17", "product": { "name": "vers:unknown/2.0.17", "product_id": "CSAFPID-8579323" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.4", "product": { "name": "vers:unknown/2.0.4", "product_id": "CSAFPID-8579336" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.5", "product": { "name": "vers:unknown/2.0.5", "product_id": "CSAFPID-8579335" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.6", "product": { "name": "vers:unknown/2.0.6", "product_id": "CSAFPID-8579334" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.7", "product": { "name": "vers:unknown/2.0.7", "product_id": "CSAFPID-8579333" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.8", "product": { "name": "vers:unknown/2.0.8", "product_id": "CSAFPID-8579332" } }, { "category": "product_version_range", "name": "vers:unknown/2.0.9", "product": { "name": "vers:unknown/2.0.9", "product_id": "CSAFPID-8579331" } }, { "category": "product_version_range", "name": "vers:unknown/2.1.0", "product": { "name": "vers:unknown/2.1.0", "product_id": "CSAFPID-8579322" } }, { "category": "product_version_range", "name": "vers:unknown/2.2.0", "product": { "name": "vers:unknown/2.2.0", "product_id": "CSAFPID-8579321" } }, { "category": "product_version_range", "name": "vers:unknown/2.2.1", "product": { "name": "vers:unknown/2.2.1", "product_id": "CSAFPID-8579320" } }, { "category": "product_version_range", "name": "vers:unknown/2.2.2", "product": { "name": "vers:unknown/2.2.2", "product_id": "CSAFPID-8579319" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.0", "product": { "name": "vers:unknown/2.3.0", "product_id": "CSAFPID-8579318" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.1", "product": { "name": "vers:unknown/2.3.1", "product_id": "CSAFPID-8579317" } }, { "category": "product_version_range", "name": "vers:unknown/2.3.2", "product": { "name": "vers:unknown/2.3.2", "product_id": "CSAFPID-8579316" } }, { "category": "product_version_range", "name": "vers:unknown/2.5.0", "product": { "name": "vers:unknown/2.5.0", "product_id": "CSAFPID-8579315" } }, { "category": "product_version_range", "name": "vers:unknown/2.5.1", "product": { "name": "vers:unknown/2.5.1", "product_id": "CSAFPID-8579314" } }, { "category": "product_version_range", "name": "vers:unknown/2.6.0", "product": { "name": "vers:unknown/2.6.0", "product_id": "CSAFPID-8579313" } }, { "category": "product_version_range", "name": "vers:unknown/2.6.1", "product": { "name": "vers:unknown/2.6.1", "product_id": "CSAFPID-8579312" } }, { "category": "product_version_range", "name": "vers:unknown/2.6.2", "product": { "name": "vers:unknown/2.6.2", "product_id": "CSAFPID-8579311" } }, { "category": "product_version_range", "name": "vers:unknown/3.0.0", "product": { "name": "vers:unknown/3.0.0", "product_id": "CSAFPID-8579310" } }, { "category": "product_version_range", "name": "vers:unknown/3.0.1", "product": { "name": "vers:unknown/3.0.1", "product_id": "CSAFPID-8579309" } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2", "product": { "name": "vers:unknown/3.0.2", "product_id": "CSAFPID-8579308" } }, { "category": "product_version_range", "name": "vers:unknown/3.0.3", "product": { "name": "vers:unknown/3.0.3", "product_id": "CSAFPID-8579307" } }, { "category": "product_version_range", "name": "vers:unknown/3.1.0", "product": { "name": "vers:unknown/3.1.0", "product_id": "CSAFPID-8579306" } }, { "category": "product_version_range", "name": "vers:unknown/3.2.0", "product": { "name": "vers:unknown/3.2.0", "product_id": "CSAFPID-8579305" } }, { "category": "product_version_range", "name": "vers:unknown/3.2.1", "product": { "name": "vers:unknown/3.2.1", "product_id": "CSAFPID-8579304" } }, { "category": "product_version_range", "name": "vers:unknown/3.3.0", "product": { "name": "vers:unknown/3.3.0", "product_id": "CSAFPID-8579303" } }, { "category": "product_version_range", "name": "vers:unknown/3.4.0", "product": { "name": "vers:unknown/3.4.0", "product_id": "CSAFPID-8579302" } }, { "category": "product_version_range", "name": "vers:unknown/3.4.1", "product": { "name": "vers:unknown/3.4.1", "product_id": "CSAFPID-8579301" } }, { "category": "product_version_range", "name": "vers:unknown/3.5.0", "product": { "name": "vers:unknown/3.5.0", "product_id": "CSAFPID-8579300" } }, { "category": "product_version_range", "name": "vers:unknown/3.6.0", "product": { "name": "vers:unknown/3.6.0", "product_id": "CSAFPID-8579299" } }, { "category": "product_version_range", "name": "vers:unknown/3.6.1", "product": { "name": "vers:unknown/3.6.1", "product_id": "CSAFPID-8579298" } }, { "category": "product_version_range", "name": "vers:unknown/3.6.2", "product": { "name": "vers:unknown/3.6.2", "product_id": "CSAFPID-8579297" } }, { "category": "product_version_range", "name": "vers:unknown/3.6.3", "product": { "name": "vers:unknown/3.6.3", "product_id": "CSAFPID-8579296" } }, { "category": "product_version_range", "name": "vers:unknown/3.6.4", "product": { "name": "vers:unknown/3.6.4", "product_id": "CSAFPID-8579295" } }, { "category": "product_version_range", "name": "vers:unknown/3.7.0", "product": { "name": "vers:unknown/3.7.0", "product_id": "CSAFPID-8579294" } }, { "category": "product_version_range", "name": "vers:unknown/3.7.1", "product": { "name": "vers:unknown/3.7.1", "product_id": "CSAFPID-8579293" } }, { "category": "product_version_range", "name": "vers:unknown/3.7.2", "product": { "name": "vers:unknown/3.7.2", "product_id": "CSAFPID-8579292" } }, { "category": "product_version_range", "name": "vers:unknown/3.7.3", "product": { "name": "vers:unknown/3.7.3", "product_id": "CSAFPID-8579291" } }, { "category": "product_version_range", "name": "vers:unknown/3.7.4", "product": { "name": "vers:unknown/3.7.4", "product_id": "CSAFPID-8579290" } }, { "category": "product_version_range", "name": "vers:unknown/3.7.5", "product": { "name": "vers:unknown/3.7.5", "product_id": "CSAFPID-8579289" } }, { "category": "product_version_range", "name": "vers:unknown/3.7.6", "product": { "name": "vers:unknown/3.7.6", "product_id": "CSAFPID-8579288" } }, { "category": "product_version_range", "name": "vers:unknown/<4.3.9", "product": { "name": "vers:unknown/<4.3.9", "product_id": "CSAFPID-8575049" } }, { "category": "product_version_range", "name": "vers:unknown/>=5.0.0-beta.1|<5.1.8", "product": { "name": "vers:unknown/>=5.0.0-beta.1|<5.1.8", "product_id": "CSAFPID-8575048" } }, { "category": "product_version_range", "name": "vers:unknown/v3.8.0", "product": { "name": "vers:unknown/v3.8.0", "product_id": "CSAFPID-8579287" } }, { "category": "product_version_range", "name": "vers:unknown/v3.8.1", "product": { "name": "vers:unknown/v3.8.1", "product_id": "CSAFPID-8579283" } }, { "category": "product_version_range", "name": "vers:unknown/v4.0.0", "product": { "name": "vers:unknown/v4.0.0", "product_id": "CSAFPID-8579271" } }, { "category": "product_version_range", "name": "vers:unknown/v4.0.0-rc.1", "product": { "name": "vers:unknown/v4.0.0-rc.1", "product_id": "CSAFPID-8579286" } }, { "category": "product_version_range", "name": "vers:unknown/v4.0.0-rc.10", "product": { "name": "vers:unknown/v4.0.0-rc.10", "product_id": "CSAFPID-8579277" } }, { "category": "product_version_range", "name": "vers:unknown/v4.0.0-rc.11", "product": { "name": "vers:unknown/v4.0.0-rc.11", "product_id": "CSAFPID-8579276" } }, { "category": "product_version_range", "name": "vers:unknown/v4.0.0-rc.12", "product": { "name": "vers:unknown/v4.0.0-rc.12", "product_id": "CSAFPID-8579275" } }, { "category": "product_version_range", "name": "vers:unknown/v4.0.0-rc.13", "product": { "name": "vers:unknown/v4.0.0-rc.13", "product_id": "CSAFPID-8579274" } }, { "category": "product_version_range", "name": "vers:unknown/v4.0.0-rc.14", "product": { "name": "vers:unknown/v4.0.0-rc.14", "product_id": "CSAFPID-8579273" } }, { "category": "product_version_range", "name": "vers:unknown/v4.0.0-rc.15", "product": { "name": "vers:unknown/v4.0.0-rc.15", "product_id": "CSAFPID-8579272" } }, { "category": "product_version_range", "name": "vers:unknown/v4.0.0-rc.2", "product": { "name": "vers:unknown/v4.0.0-rc.2", "product_id": "CSAFPID-8579285" } }, { "category": "product_version_range", "name": "vers:unknown/v4.0.0-rc.3", "product": { "name": "vers:unknown/v4.0.0-rc.3", "product_id": "CSAFPID-8579284" } }, { "category": "product_version_range", "name": "vers:unknown/v4.0.0-rc.4", "product": { "name": "vers:unknown/v4.0.0-rc.4", "product_id": "CSAFPID-8579282" } }, { "category": "product_version_range", "name": "vers:unknown/v4.0.0-rc.6", "product": { "name": "vers:unknown/v4.0.0-rc.6", "product_id": "CSAFPID-8579281" } }, { "category": "product_version_range", "name": "vers:unknown/v4.0.0-rc.7", "product": { "name": "vers:unknown/v4.0.0-rc.7", "product_id": "CSAFPID-8579280" } }, { "category": "product_version_range", "name": "vers:unknown/v4.0.0-rc.8", "product": { "name": "vers:unknown/v4.0.0-rc.8", "product_id": "CSAFPID-8579279" } }, { "category": "product_version_range", "name": "vers:unknown/v4.0.0-rc.9", "product": { "name": "vers:unknown/v4.0.0-rc.9", "product_id": "CSAFPID-8579278" } }, { "category": "product_version_range", "name": "vers:unknown/v4.2.0", "product": { "name": "vers:unknown/v4.2.0", "product_id": "CSAFPID-8579270" } }, { "category": "product_version_range", "name": "vers:unknown/v4.2.1", "product": { "name": "vers:unknown/v4.2.1", "product_id": "CSAFPID-8579269" } }, { "category": "product_version_range", "name": "vers:unknown/v4.2.2", "product": { "name": "vers:unknown/v4.2.2", "product_id": "CSAFPID-8579268" } }, { "category": "product_version_range", "name": "vers:unknown/v4.3.0", "product": { "name": "vers:unknown/v4.3.0", "product_id": "CSAFPID-8579267" } }, { "category": "product_version_range", "name": "vers:unknown/v4.3.1", "product": { "name": "vers:unknown/v4.3.1", "product_id": "CSAFPID-8579266" } }, { "category": "product_version_range", "name": "vers:unknown/v4.3.3", "product": { "name": "vers:unknown/v4.3.3", "product_id": "CSAFPID-8579265" } }, { "category": "product_version_range", "name": "vers:unknown/v4.3.4", "product": { "name": "vers:unknown/v4.3.4", "product_id": "CSAFPID-8579264" } }, { "category": "product_version_range", "name": "vers:unknown/v4.3.5", "product": { "name": "vers:unknown/v4.3.5", "product_id": "CSAFPID-8579263" } }, { "category": "product_version_range", "name": "vers:unknown/v4.3.6", "product": { "name": "vers:unknown/v4.3.6", "product_id": "CSAFPID-8579262" } }, { "category": "product_version_range", "name": "vers:unknown/v4.3.7", "product": { "name": "vers:unknown/v4.3.7", "product_id": "CSAFPID-8579255" } }, { "category": "product_version_range", "name": "vers:unknown/v4.3.8", "product": { "name": "vers:unknown/v4.3.8", "product_id": "CSAFPID-8579253" } }, { "category": "product_version_range", "name": "vers:unknown/v5.0.1", "product": { "name": "vers:unknown/v5.0.1", "product_id": "CSAFPID-8579261" } }, { "category": "product_version_range", "name": "vers:unknown/v5.0.2", "product": { "name": "vers:unknown/v5.0.2", "product_id": "CSAFPID-8579260" } }, { "category": "product_version_range", "name": "vers:unknown/v5.1.1", "product": { "name": "vers:unknown/v5.1.1", "product_id": "CSAFPID-8579259" } }, { "category": "product_version_range", "name": "vers:unknown/v5.1.2", "product": { "name": "vers:unknown/v5.1.2", "product_id": "CSAFPID-8579258" } }, { "category": "product_version_range", "name": "vers:unknown/v5.1.3", "product": { "name": "vers:unknown/v5.1.3", "product_id": "CSAFPID-8579257" } }, { "category": "product_version_range", "name": "vers:unknown/v5.1.4", "product": { "name": "vers:unknown/v5.1.4", "product_id": "CSAFPID-8579256" } }, { "category": "product_version_range", "name": "vers:unknown/v5.1.5", "product": { "name": "vers:unknown/v5.1.5", "product_id": "CSAFPID-8579254" } }, { "category": "product_version_range", "name": "vers:unknown/v5.1.6", "product": { "name": "vers:unknown/v5.1.6", "product_id": "CSAFPID-8579252" } }, { "category": "product_version_range", "name": "vers:unknown/v5.1.7", "product": { "name": "vers:unknown/v5.1.7", "product_id": "CSAFPID-8579251" } } ], "category": "product_name", "name": "immutable-js" } ], "category": "vendor", "name": "immutable-js" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/3.8.2+dfsg-3", "product": { "name": "vers:unknown/3.8.2+dfsg-3", "product_id": "CSAFPID-8596315", "product_identification_helper": { "purl": "pkg:deb/ubuntu/node-immutable@3.8.2%2Bdfsg-3?arch=source&distro=focal" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0", "product": { "name": "vers:unknown/>=0", "product_id": "CSAFPID-8596316" } } ], "category": "product_name", "name": "node-immutable" } ], "category": "product_family", "name": "Ubuntu:20.04:LTS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/3.8.2+dfsg-3", "product": { "name": "vers:unknown/3.8.2+dfsg-3", "product_id": "CSAFPID-8596317", "product_identification_helper": { "purl": "pkg:deb/ubuntu/node-immutable@3.8.2%2Bdfsg-3?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/4.0.0-1", "product": { "name": "vers:unknown/4.0.0-1", "product_id": "CSAFPID-8596318", "product_identification_helper": { "purl": "pkg:deb/ubuntu/node-immutable@4.0.0-1?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/4.0.0-2", "product": { "name": "vers:unknown/4.0.0-2", "product_id": "CSAFPID-8596319", "product_identification_helper": { "purl": "pkg:deb/ubuntu/node-immutable@4.0.0-2?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0", "product": { "name": "vers:unknown/>=0", "product_id": "CSAFPID-8596320" } } ], "category": "product_name", "name": "node-immutable" } ], "category": "product_family", "name": "Ubuntu:22.04:LTS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/4.1.0-3", "product": { "name": "vers:unknown/4.1.0-3", "product_id": "CSAFPID-8596321", "product_identification_helper": { "purl": "pkg:deb/ubuntu/node-immutable@4.1.0-3?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/4.3.4-1", "product": { "name": "vers:unknown/4.3.4-1", "product_id": "CSAFPID-8596322", "product_identification_helper": { "purl": "pkg:deb/ubuntu/node-immutable@4.3.4-1?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0", "product": { "name": "vers:unknown/>=0", "product_id": "CSAFPID-8596323" } } ], "category": "product_name", "name": "node-immutable" } ], "category": "product_family", "name": "Ubuntu:24.04:LTS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/4.3.4-1", "product": { "name": "vers:unknown/4.3.4-1", "product_id": "CSAFPID-8596324", "product_identification_helper": { "purl": "pkg:deb/ubuntu/node-immutable@4.3.4-1?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0", "product": { "name": "vers:unknown/>=0", "product_id": "CSAFPID-8596325" } } ], "category": "product_name", "name": "node-immutable" } ], "category": "product_family", "name": "Ubuntu:25.10" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/4.3.4-1", "product": { "name": "vers:unknown/4.3.4-1", "product_id": "CSAFPID-8596326", "product_identification_helper": { "purl": "pkg:deb/ubuntu/node-immutable@4.3.4-1?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/4.3.8-2", "product": { "name": "vers:unknown/4.3.8-2", "product_id": "CSAFPID-8596327", "product_identification_helper": { "purl": "pkg:deb/ubuntu/node-immutable@4.3.8-2?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0", "product": { "name": "vers:unknown/>=0", "product_id": "CSAFPID-8596328" } } ], "category": "product_name", "name": "node-immutable" } ], "category": "product_family", "name": "Ubuntu:26.04:LTS" } ], "category": "vendor", "name": "Ubuntu" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/unknown", "product": { "name": "vers:deb/unknown", "product_id": "CSAFPID-5768418" } } ], "category": "product_name", "name": "node-immutable" } ], "category": "product_family", "name": "bookworm" } ], "category": "vendor", "name": "debian" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-59879", "cwe": { "id": "CWE-1284", "name": "Improper Validation of Specified Quantity in Input" }, "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "CSAFPID-9368018", "CSAFPID-9368019", "CSAFPID-9368020", "CSAFPID-9368021", "CSAFPID-9368022", "CSAFPID-9368023", "CSAFPID-9368024", "CSAFPID-9368025", "CSAFPID-9368026", "CSAFPID-9368128", "CSAFPID-9486014", "CSAFPID-9486015", "CSAFPID-9486016", "CSAFPID-9486017", "CSAFPID-9486018", "CSAFPID-9486019", "CSAFPID-9486020", "CSAFPID-9486021", "CSAFPID-9486022", "CSAFPID-9486023", "CSAFPID-9486024", "CSAFPID-9486025", "CSAFPID-9486026", "CSAFPID-9486028", "CSAFPID-9486029", "CSAFPID-9486030", "CSAFPID-9486031", "CSAFPID-9486032", "CSAFPID-9486033", "CSAFPID-9486034", "CSAFPID-9486035", "CSAFPID-9486036", "CSAFPID-9486037", "CSAFPID-9486038", "CSAFPID-9486039", "CSAFPID-9486040", "CSAFPID-9486041", "CSAFPID-9486042", "CSAFPID-9486043", "CSAFPID-9486049", "CSAFPID-9486050", "CSAFPID-9486051", "CSAFPID-9486052", "CSAFPID-9486053", "CSAFPID-9486054", "CSAFPID-9486055", "CSAFPID-9486056", "CSAFPID-9486057", "CSAFPID-9486058", "CSAFPID-9486060", "CSAFPID-9486061", "CSAFPID-9486062", "CSAFPID-9486063", "CSAFPID-9486064", "CSAFPID-9486065", "CSAFPID-9486066", "CSAFPID-9486067", "CSAFPID-9486068", "CSAFPID-9486069", "CSAFPID-9486070", "CSAFPID-9486071", "CSAFPID-9486072", "CSAFPID-9486073", "CSAFPID-9486074", "CSAFPID-9486075", "CSAFPID-9486293", "CSAFPID-9486294", "CSAFPID-9486295", "CSAFPID-9486296", "CSAFPID-9486297", "CSAFPID-9486298", "CSAFPID-9486299", "CSAFPID-9486300", "CSAFPID-9486301", "CSAFPID-9486302", "CSAFPID-9486304", "CSAFPID-9486305", "CSAFPID-9486306", "CSAFPID-9486307", "CSAFPID-9486308", "CSAFPID-9486309", "CSAFPID-9486310", "CSAFPID-9486311", "CSAFPID-9486312", "CSAFPID-9486313", "CSAFPID-9486314", "CSAFPID-9486315", "CSAFPID-9486316", "CSAFPID-9486317", "CSAFPID-9486318", "CSAFPID-9486319", "CSAFPID-9502291", "CSAFPID-9502292", "CSAFPID-9502293", "CSAFPID-9502297", "CSAFPID-9502298", "CSAFPID-9502299", "CSAFPID-9502300", "CSAFPID-9502301", "CSAFPID-9502302", "CSAFPID-9502303", "CSAFPID-9502304", "CSAFPID-9502306", "CSAFPID-9502307", "CSAFPID-9502318", "CSAFPID-9502319", "CSAFPID-9502320", "CSAFPID-9502321", "CSAFPID-9531117", "CSAFPID-9531118", "CSAFPID-9531119", "CSAFPID-9531120", "CSAFPID-9531121", "CSAFPID-9531124", "CSAFPID-9531125", "CSAFPID-9531127", "CSAFPID-9531128", "CSAFPID-9531129", "CSAFPID-9531130", "CSAFPID-9531131", "CSAFPID-9531132", "CSAFPID-9531133", "CSAFPID-9531134", "CSAFPID-9531135", "CSAFPID-9531136", "CSAFPID-9531137", "CSAFPID-9531138", "CSAFPID-9531139", "CSAFPID-9531140", "CSAFPID-9531141", "CSAFPID-9531142", "CSAFPID-9531143", "CSAFPID-9531144", "CSAFPID-9531145", "CSAFPID-9531146", "CSAFPID-9531147", "CSAFPID-9531148", "CSAFPID-9531149", "CSAFPID-9531153", "CSAFPID-9531154", "CSAFPID-9531156", "CSAFPID-9531157", "CSAFPID-9531158", "CSAFPID-9531160", "CSAFPID-9531161", "CSAFPID-9531162", "CSAFPID-9531163", "CSAFPID-9531164", "CSAFPID-9531165", "CSAFPID-9531166", "CSAFPID-9531167", "CSAFPID-9531168", "CSAFPID-9539913", "CSAFPID-9539914", "CSAFPID-9539915", "CSAFPID-9539916", "CSAFPID-9539917", "CSAFPID-9539918", "CSAFPID-9539919", "CSAFPID-9539921", "CSAFPID-9539922", "CSAFPID-9539923", "CSAFPID-9539924", "CSAFPID-9539925", "CSAFPID-9539926", "CSAFPID-9539927", "CSAFPID-9539928", "CSAFPID-9539929", "CSAFPID-9539930", "CSAFPID-9539931", "CSAFPID-9539932", "CSAFPID-9539933", "CSAFPID-9539934", "CSAFPID-9539935", "CSAFPID-9539936", "CSAFPID-9539937", "CSAFPID-9539938", "CSAFPID-9539939", "CSAFPID-9539940", "CSAFPID-9539941", "CSAFPID-9539942", "CSAFPID-9539943", "CSAFPID-9539944", "CSAFPID-9539945", "CSAFPID-9539946", "CSAFPID-9539947", "CSAFPID-9539948", "CSAFPID-9539949", "CSAFPID-9539950", "CSAFPID-9539951", "CSAFPID-9539952", "CSAFPID-9539953", "CSAFPID-9539954", "CSAFPID-9539955", "CSAFPID-9539956", "CSAFPID-9539957", "CSAFPID-9539958", "CSAFPID-9539959", "CSAFPID-9539977", "CSAFPID-9539978", "CSAFPID-9539979", "CSAFPID-9539980", "CSAFPID-9539981", "CSAFPID-9539982", "CSAFPID-9539983", "CSAFPID-9539984", "CSAFPID-9539985", "CSAFPID-9559042", "CSAFPID-9559043", "CSAFPID-9559044", "CSAFPID-9559045", "CSAFPID-9559046", "CSAFPID-9559047", "CSAFPID-9559048", "CSAFPID-9559049", "CSAFPID-9559050", "CSAFPID-9559702", "CSAFPID-9559703", "CSAFPID-9559704", "CSAFPID-9559705", "CSAFPID-9559706", "CSAFPID-9559707", "CSAFPID-9559708", "CSAFPID-9559709", "CSAFPID-9559710" ] } ], "notes": [ { "category": "description", "text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:72850" }, { "category": "description", "text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:72854" }, { "category": "description", "text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:72712" }, { "category": "description", "text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:72851" }, { "category": "description", "text": "Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and updateIn mishandle an index or size in the range 2 ** 30 to 2 ** 31 in setListBounds in src/List.js, causing an empty List to enter an uncatchable infinite loop, a populated List to allocate without bound until process abort, or setSize to silently wrap large values. This issue is fixed in versions 4.3.9 and 5.1.8.", "title": "osvgit - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-59879.json?alt=media" }, { "category": "description", "text": "## Summary\n\n`List#set`, `List#setSize`, `List#setIn`, `List#updateIn` (and the functional `set` / `setIn` / `updateIn`) mishandle an index or size in the range `[2 ** 30, 2 ** 31)`:\n\n- On an **empty** `List` the operation enters an **uncatchable infinite loop** (a tight CPU spin; a surrounding `try/catch` never regains control). Only killing the worker recovers it.\n- On a **populated** `List` (≥ 32 elements — i.e. any array of ≥ 32 items turned into a `List` by `fromJS`) the loop allocates without bound → heap exhaustion → the **process aborts** (`SIGABRT`, exit `134`, or kernel OOM-kill `137`). A real crash, not a recoverable error.\n\nThe index may be a **numeric string**, so it can come straight from a request body, URL, or key-path. A single small unauthenticated request is enough.\n\nThere is also a companion **silent data-corruption** issue in `setSize`:\n\n```js\nList([1, 2, 3]).setSize(2 ** 31); // before fix => size 0 (silently cleared)\nList([1, 2, 3]).setSize(2 ** 32 + 5); // before fix => size 5 (huge value wraps to 5)\n```\n\n## Impact\n\nAvailability only. A reachable configuration is any endpoint that routes untrusted input into a `List` index or a `setIn`/`updateIn` key-path — which the extremely common `state = fromJS(body); state.setIn(userPath, value)` pattern does (config stores, document/collection editors, redux-immutable reducers, JSON-Patch endpoints, etc.).\n\nNo confidentiality or integrity impact, no RCE. The companion `setSize` bug can silently corrupt application state (wrong size) without crashing.\n\n## Reproduction (immutable 5.1.7)\n\n```ts\nimport { fromJS, List } from 'immutable';\n\n// 1) Populated List: OOM -> process abort (SIGABRT, exit 134) within ~2s\nfromJS({ items: new Array(64).fill(0) }).setIn(['items', '1073741824'], 'x');\n\n// 2) Empty List: hangs forever, uncatchable\nList().set(2 ** 30, 'x');\n\n// 3) Silent truncation\nList([1, 2, 3]).setSize(2 ** 31); // => size 0\nList([1, 2, 3]).setSize(2 ** 32 + 5); // => size 5\n```\n\nA remote 43-byte HTTP request (`{\"path\":[\"items\",\"1073741824\"],\"value\":\"x\"}`) is sufficient to abort a worker that applies it via `state = state.setIn(path, value)`.\n\nAny index in `[2 ** 30, 2 ** 31)` works (`1073741824`, `2000000000`, …). An index in `[2 ** 31, 2 ** 32)` does not crash — it silently wraps (clearing the List) via the same root cause.\n\n## Root cause\n\n`List` stores its values in a 32-wide trie (`SHIFT = 5`, so each level addresses 5 more bits) and uses **signed 32-bit bitwise arithmetic** throughout `setListBounds()` (`src/List.js`):\n\n1. **Infinite loop (the hang / OOM).** The level-raising loop\n\n```js\nwhile (newTailOffset >= 1 << (newLevel + SHIFT)) {\n newRoot = new VNode(\n newRoot && newRoot.array.length ? [newRoot] : [],\n owner\n );\n newLevel += SHIFT;\n}\n```\n\nrelies on `1 << (newLevel + SHIFT)`. A JavaScript shift count is taken **mod 32**, so once `newLevel + SHIFT` reaches `31` the term goes **negative** (`1 << 31 === -2147483648`) and at `32` wraps to `1` (`1 << 35 === 8`). The comparison then stays `true` forever and the loop never terminates. On a populated `List`, each iteration retains a new `VNode` (`[newRoot]`), so the heap fills and V8 aborts; on an empty `List` it spins on CPU without allocating.\n\n2. **Silent wraparound (the `setSize` corruption).** The `begin |= 0` / `end |= 0` coercion (`ToInt32`) silently wraps large finite values (`(2 ** 31) | 0 === -2147483648`, `(2 ** 32 + 5) | 0 === 5`), producing a wrong resulting size instead of an error.\n\nThe threshold is `2 ** 30`: that is the largest size for which `1 << (newLevel + SHIFT)` stays a valid positive 32-bit integer throughout the loops (`newLevel + SHIFT` stays ≤ 30).\n\n## Remediation\n\nThe fix is contained to `setListBounds()` in `src/List.js`:\n\n1. **Validate up front, before the lossy `| 0` coercion.** Compute the intended origin and capacity in full precision and throw a clear, catchable `RangeError` when they exceed the addressable range (`MAX_LIST_SIZE = 2 ** 30`). `Infinity`/`NaN` are left to the existing `| 0 → 0` behaviour (so `setSize(Infinity)` stays `0` and `slice(0, Infinity)` still means \"to the end\").\n\n2. **Stop the shift from wrapping.** Replace `1 << exp` in the level-raising loops with a helper that uses the cheap bitwise shift while it is exact (`exp ≤ 30`, the common path including every `push`/`setSize`/`slice`) and falls back to the non-wrapping `2 ** exp` only for the rare deep trees reached when a negative origin (`unshift` / negative index) is normalized to a large positive capacity (`exp` can reach 35 there, where `1 << 35` would wrap to 8).\n\nThis turns every hang, the misleading `\"Maximum call stack size exceeded\"`, the OOM/`SIGABRT`, and the silent `setSize` truncation into one descriptive `RangeError`, preserves all behaviour for sizes `< 2 ** 30`, and keeps the hot `push` path on the fast bitwise shift (the `2 ** exp` branch is never reached by non-negative operations).\n\n### Is the new limit a breaking change?\n\nNo working code is affected. A `List` could never actually hold `≥ 2 ** 30` values before — the attempt hung, crashed, or silently corrupted the size. The limit was already implicit in the 32-bit trie; the fix only makes it explicit and catchable, mirroring native JS arrays (`new Array(2 ** 32)` → `RangeError: Invalid array length`). The single observable behaviour change is that `setSize(hugeValue)`, which used to return a silently wrong size, now throws. `2 ** 30` ≈ 1.07 billion entries (~8 GB of pointers alone), far beyond any practical use.\n\n## Mitigations (for users who cannot upgrade immediately)\n\n- Validate/clamp any externally supplied `List` index or `setIn`/`updateIn` key-path segment against a sane maximum before passing it to immutable.\n- Reject numeric path segments `≥ 2 ** 30`.\n- Run request handling in a worker that can be restarted, and cap the heap (`--max-old-space-size`) so an abort is contained.", "title": "osvnpm - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/npm%2FGHSA-v56q-mh7h-f735.json?alt=media" }, { "category": "description", "text": "Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and updateIn mishandle an index or size in the range 2 ** 30 to 2 ** 31 in setListBounds in src/List.js, causing an empty List to enter an uncatchable infinite loop, a populated List to allocate without bound until process abort, or setSize to silently wrap large values. This issue is fixed in versions 4.3.9 and 5.1.8.", "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-59879" }, { "category": "description", "text": "## Summary\n\n`List#set`, `List#setSize`, `List#setIn`, `List#updateIn` (and the functional `set` / `setIn` / `updateIn`) mishandle an index or size in the range `[2 ** 30, 2 ** 31)`:\n\n- On an **empty** `List` the operation enters an **uncatchable infinite loop** (a tight CPU spin; a surrounding `try/catch` never regains control). Only killing the worker recovers it.\n- On a **populated** `List` (≥ 32 elements — i.e. any array of ≥ 32 items turned into a `List` by `fromJS`) the loop allocates without bound → heap exhaustion → the **process aborts** (`SIGABRT`, exit `134`, or kernel OOM-kill `137`). A real crash, not a recoverable error.\n\nThe index may be a **numeric string**, so it can come straight from a request body, URL, or key-path. A single small unauthenticated request is enough.\n\nThere is also a companion **silent data-corruption** issue in `setSize`:\n\n```js\nList([1, 2, 3]).setSize(2 ** 31); // before fix => size 0 (silently cleared)\nList([1, 2, 3]).setSize(2 ** 32 + 5); // before fix => size 5 (huge value wraps to 5)\n```\n\n## Impact\n\nAvailability only. A reachable configuration is any endpoint that routes untrusted input into a `List` index or a `setIn`/`updateIn` key-path — which the extremely common `state = fromJS(body); state.setIn(userPath, value)` pattern does (config stores, document/collection editors, redux-immutable reducers, JSON-Patch endpoints, etc.).\n\nNo confidentiality or integrity impact, no RCE. The companion `setSize` bug can silently corrupt application state (wrong size) without crashing.\n\n## Reproduction (immutable 5.1.7)\n\n```ts\nimport { fromJS, List } from 'immutable';\n\n// 1) Populated List: OOM -> process abort (SIGABRT, exit 134) within ~2s\nfromJS({ items: new Array(64).fill(0) }).setIn(['items', '1073741824'], 'x');\n\n// 2) Empty List: hangs forever, uncatchable\nList().set(2 ** 30, 'x');\n\n// 3) Silent truncation\nList([1, 2, 3]).setSize(2 ** 31); // => size 0\nList([1, 2, 3]).setSize(2 ** 32 + 5); // => size 5\n```\n\nA remote 43-byte HTTP request (`{\"path\":[\"items\",\"1073741824\"],\"value\":\"x\"}`) is sufficient to abort a worker that applies it via `state = state.setIn(path, value)`.\n\nAny index in `[2 ** 30, 2 ** 31)` works (`1073741824`, `2000000000`, …). An index in `[2 ** 31, 2 ** 32)` does not crash — it silently wraps (clearing the List) via the same root cause.\n\n## Root cause\n\n`List` stores its values in a 32-wide trie (`SHIFT = 5`, so each level addresses 5 more bits) and uses **signed 32-bit bitwise arithmetic** throughout `setListBounds()` (`src/List.js`):\n\n1. **Infinite loop (the hang / OOM).** The level-raising loop\n\n```js\nwhile (newTailOffset >= 1 << (newLevel + SHIFT)) {\n newRoot = new VNode(\n newRoot && newRoot.array.length ? [newRoot] : [],\n owner\n );\n newLevel += SHIFT;\n}\n```\n\nrelies on `1 << (newLevel + SHIFT)`. A JavaScript shift count is taken **mod 32**, so once `newLevel + SHIFT` reaches `31` the term goes **negative** (`1 << 31 === -2147483648`) and at `32` wraps to `1` (`1 << 35 === 8`). The comparison then stays `true` forever and the loop never terminates. On a populated `List`, each iteration retains a new `VNode` (`[newRoot]`), so the heap fills and V8 aborts; on an empty `List` it spins on CPU without allocating.\n\n2. **Silent wraparound (the `setSize` corruption).** The `begin |= 0` / `end |= 0` coercion (`ToInt32`) silently wraps large finite values (`(2 ** 31) | 0 === -2147483648`, `(2 ** 32 + 5) | 0 === 5`), producing a wrong resulting size instead of an error.\n\nThe threshold is `2 ** 30`: that is the largest size for which `1 << (newLevel + SHIFT)` stays a valid positive 32-bit integer throughout the loops (`newLevel + SHIFT` stays ≤ 30).\n\n## Remediation\n\nThe fix is contained to `setListBounds()` in `src/List.js`:\n\n1. **Validate up front, before the lossy `| 0` coercion.** Compute the intended origin and capacity in full precision and throw a clear, catchable `RangeError` when they exceed the addressable range (`MAX_LIST_SIZE = 2 ** 30`). `Infinity`/`NaN` are left to the existing `| 0 → 0` behaviour (so `setSize(Infinity)` stays `0` and `slice(0, Infinity)` still means \"to the end\").\n\n2. **Stop the shift from wrapping.** Replace `1 << exp` in the level-raising loops with a helper that uses the cheap bitwise shift while it is exact (`exp ≤ 30`, the common path including every `push`/`setSize`/`slice`) and falls back to the non-wrapping `2 ** exp` only for the rare deep trees reached when a negative origin (`unshift` / negative index) is normalized to a large positive capacity (`exp` can reach 35 there, where `1 << 35` would wrap to 8).\n\nThis turns every hang, the misleading `\"Maximum call stack size exceeded\"`, the OOM/`SIGABRT`, and the silent `setSize` truncation into one descriptive `RangeError`, preserves all behaviour for sizes `< 2 ** 30`, and keeps the hot `push` path on the fast bitwise shift (the `2 ** exp` branch is never reached by non-negative operations).\n\n### Is the new limit a breaking change?\n\nNo working code is affected. A `List` could never actually hold `≥ 2 ** 30` values before — the attempt hung, crashed, or silently corrupted the size. The limit was already implicit in the 32-bit trie; the fix only makes it explicit and catchable, mirroring native JS arrays (`new Array(2 ** 32)` → `RangeError: Invalid array length`). The single observable behaviour change is that `setSize(hugeValue)`, which used to return a silently wrong size, now throws. `2 ** 30` ≈ 1.07 billion entries (~8 GB of pointers alone), far beyond any practical use.\n\n## Mitigations (for users who cannot upgrade immediately)\n\n- Validate/clamp any externally supplied `List` index or `setIn`/`updateIn` key-path segment against a sane maximum before passing it to immutable.\n- Reject numeric path segments `≥ 2 ** 30`.\n- Run request handling in a worker that can be restarted, and cap the heap (`--max-old-space-size`) so an abort is contained.", "title": "github - https://api.github.com/advisories/GHSA-v56q-mh7h-f735" }, { "category": "description", "text": "Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and updateIn mishandle an index or size in the range 2 ** 30 to 2 ** 31 in setListBounds in src/List.js, causing an empty List to enter an uncatchable infinite loop, a populated List to allocate without bound until process abort, or setSize to silently wrap large values. This issue is fixed in versions 4.3.9 and 5.1.8.", "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-59879" }, { "category": "description", "text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:74503" }, { "category": "description", "text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:74384" }, { "category": "description", "text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:74435" }, { "category": "description", "text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:77656" }, { "category": "description", "text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:79546" }, { "category": "description", "text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:79366" }, { "category": "description", "text": "Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and updateIn mishandle an index or size in the range 2 ** 30 to 2 ** 31 in setListBounds in src/List.js, causing an empty List to enter an uncatchable infinite loop, a populated List to allocate without bound until process abort, or setSize to silently wrap large values. This issue is fixed in versions 4.3.9 and 5.1.8.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUBUNTU-CVE-2026-59879.json?alt=media" }, { "category": "description", "text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:69255" }, { "category": "description", "text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:69289" }, { "category": "description", "text": "Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and updateIn mishandle an index or size in the range 2 ** 30 to 2 ** 31 in setListBounds in src/List.js, causing an empty List to enter an uncatchable infinite loop, a populated List to allocate without bound until process abort, or setSize to silently wrap large values. This issue is fixed in versions 4.3.9 and 5.1.8.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-59879" }, { "category": "other", "text": "0.00665", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" }, { "category": "other", "text": "8.7", "title": "CVSSV4 base score" }, { "category": "other", "text": "4.3", "title": "NCSC Score" }, { "category": "other", "text": "There is product data available from source Certbundde, VENDOR FIX as product remediation category, Is related to (a version of) an uncommon product", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "The value of the most recent CVSS (V3) score, There is exploit data available from source Nvd, Is related to CWE-1284 (Improper Validation of Specified Quantity in Input), There is product data available from source Debian", "title": "NCSC Score top decreasing factors" } ], "product_status": { "fixed": [ "CSAFPID-9368017", "CSAFPID-9368129", "CSAFPID-9486027", "CSAFPID-9486059", "CSAFPID-9486303", "CSAFPID-9486995", "CSAFPID-9502294", "CSAFPID-9502295", "CSAFPID-9502296", "CSAFPID-9502305", "CSAFPID-9502308", "CSAFPID-9502309", "CSAFPID-9502310", "CSAFPID-9502311", "CSAFPID-9502312", "CSAFPID-9502313", "CSAFPID-9502314", "CSAFPID-9502315", "CSAFPID-9502316", "CSAFPID-9502317", "CSAFPID-9531126", "CSAFPID-9539920", "CSAFPID-9539976", "CSAFPID-9559041", "CSAFPID-9559701" ], "known_affected": [ "CSAFPID-5768418", "CSAFPID-8596315", "CSAFPID-8596316", "CSAFPID-8596317", "CSAFPID-8596318", "CSAFPID-8596319", "CSAFPID-8596320", "CSAFPID-8596321", "CSAFPID-8596322", "CSAFPID-8596323", "CSAFPID-8596324", "CSAFPID-8596325", "CSAFPID-8596326", "CSAFPID-8596327", "CSAFPID-8596328", "CSAFPID-8619165", "CSAFPID-8619166", "CSAFPID-8930147", "CSAFPID-1331597", "CSAFPID-1337768", "CSAFPID-1337765", "CSAFPID-9012406", "CSAFPID-9012408", "CSAFPID-9329664", "CSAFPID-9329665", "CSAFPID-9329666", "CSAFPID-9329667", "CSAFPID-9329668", "CSAFPID-9329669", "CSAFPID-9329670", "CSAFPID-9329671", "CSAFPID-9329672", "CSAFPID-9329673", "CSAFPID-9329674", "CSAFPID-9329675", "CSAFPID-9329676", "CSAFPID-9329677", "CSAFPID-9329678", "CSAFPID-1317175", "CSAFPID-8575049", "CSAFPID-8575048", "CSAFPID-9485661", "CSAFPID-9485662", "CSAFPID-9485663", "CSAFPID-8579330", "CSAFPID-8579329", "CSAFPID-8579328", "CSAFPID-8579327", "CSAFPID-8579326", "CSAFPID-8579325", "CSAFPID-8579324", "CSAFPID-8579323", "CSAFPID-8579336", "CSAFPID-8579335", "CSAFPID-8579334", "CSAFPID-8579333", "CSAFPID-8579332", "CSAFPID-8579331", "CSAFPID-8579322", "CSAFPID-8579321", "CSAFPID-8579320", "CSAFPID-8579319", "CSAFPID-8579318", "CSAFPID-8579317", "CSAFPID-8579316", "CSAFPID-8579315", "CSAFPID-8579314", "CSAFPID-8579313", "CSAFPID-8579312", "CSAFPID-8579311", "CSAFPID-8579310", "CSAFPID-8579309", "CSAFPID-8579308", "CSAFPID-8579307", "CSAFPID-8579306", "CSAFPID-8579305", "CSAFPID-8579304", "CSAFPID-8579303", "CSAFPID-8579302", "CSAFPID-8579301", "CSAFPID-8579300", "CSAFPID-8579299", "CSAFPID-8579298", "CSAFPID-8579297", "CSAFPID-8579296", "CSAFPID-8579295", "CSAFPID-8579294", "CSAFPID-8579293", "CSAFPID-8579292", "CSAFPID-8579291", "CSAFPID-8579290", "CSAFPID-8579289", "CSAFPID-8579288", "CSAFPID-8579287", "CSAFPID-8579283", "CSAFPID-8579271", "CSAFPID-8579286", "CSAFPID-8579277", "CSAFPID-8579276", "CSAFPID-8579275", "CSAFPID-8579274", "CSAFPID-8579273", "CSAFPID-8579272", "CSAFPID-8579285", "CSAFPID-8579284", "CSAFPID-8579282", "CSAFPID-8579281", "CSAFPID-8579280", "CSAFPID-8579279", "CSAFPID-8579278", "CSAFPID-8579270", "CSAFPID-8579269", "CSAFPID-8579268", "CSAFPID-8579267", "CSAFPID-8579266", "CSAFPID-8579265", "CSAFPID-8579264", "CSAFPID-8579263", "CSAFPID-8579262", "CSAFPID-8579255", "CSAFPID-8579253", "CSAFPID-8579261", "CSAFPID-8579260", "CSAFPID-8579259", "CSAFPID-8579258", "CSAFPID-8579257", "CSAFPID-8579256", "CSAFPID-8579254", "CSAFPID-8579252", "CSAFPID-8579251", "CSAFPID-9119849", "CSAFPID-9332036", "CSAFPID-8873354" ], "known_not_affected": [ "CSAFPID-9368018", "CSAFPID-9368019", "CSAFPID-9368020", "CSAFPID-9368021", "CSAFPID-9368022", "CSAFPID-9368023", "CSAFPID-9368024", "CSAFPID-9368025", "CSAFPID-9368026", "CSAFPID-9368128", "CSAFPID-9486014", "CSAFPID-9486015", "CSAFPID-9486016", "CSAFPID-9486017", "CSAFPID-9486018", "CSAFPID-9486019", "CSAFPID-9486020", "CSAFPID-9486021", "CSAFPID-9486022", "CSAFPID-9486023", "CSAFPID-9486024", "CSAFPID-9486025", "CSAFPID-9486026", "CSAFPID-9486028", "CSAFPID-9486029", "CSAFPID-9486030", "CSAFPID-9486031", "CSAFPID-9486032", "CSAFPID-9486033", "CSAFPID-9486034", "CSAFPID-9486035", "CSAFPID-9486036", "CSAFPID-9486037", "CSAFPID-9486038", "CSAFPID-9486039", "CSAFPID-9486040", "CSAFPID-9486041", "CSAFPID-9486042", "CSAFPID-9486043", "CSAFPID-9486049", "CSAFPID-9486050", "CSAFPID-9486051", "CSAFPID-9486052", "CSAFPID-9486053", "CSAFPID-9486054", "CSAFPID-9486055", "CSAFPID-9486056", "CSAFPID-9486057", "CSAFPID-9486058", "CSAFPID-9486060", "CSAFPID-9486061", "CSAFPID-9486062", "CSAFPID-9486063", "CSAFPID-9486064", "CSAFPID-9486065", "CSAFPID-9486066", "CSAFPID-9486067", "CSAFPID-9486068", "CSAFPID-9486069", "CSAFPID-9486070", "CSAFPID-9486071", "CSAFPID-9486072", "CSAFPID-9486073", "CSAFPID-9486074", "CSAFPID-9486075", "CSAFPID-9486293", "CSAFPID-9486294", "CSAFPID-9486295", "CSAFPID-9486296", "CSAFPID-9486297", "CSAFPID-9486298", "CSAFPID-9486299", "CSAFPID-9486300", "CSAFPID-9486301", "CSAFPID-9486302", "CSAFPID-9486304", "CSAFPID-9486305", "CSAFPID-9486306", "CSAFPID-9486307", "CSAFPID-9486308", "CSAFPID-9486309", "CSAFPID-9486310", "CSAFPID-9486311", "CSAFPID-9486312", "CSAFPID-9486313", "CSAFPID-9486314", "CSAFPID-9486315", "CSAFPID-9486316", "CSAFPID-9486317", "CSAFPID-9486318", "CSAFPID-9486319", "CSAFPID-9502291", "CSAFPID-9502292", "CSAFPID-9502293", "CSAFPID-9502297", "CSAFPID-9502298", "CSAFPID-9502299", "CSAFPID-9502300", "CSAFPID-9502301", "CSAFPID-9502302", "CSAFPID-9502303", "CSAFPID-9502304", "CSAFPID-9502306", "CSAFPID-9502307", "CSAFPID-9502318", "CSAFPID-9502319", "CSAFPID-9502320", "CSAFPID-9502321", "CSAFPID-9531117", "CSAFPID-9531118", "CSAFPID-9531119", "CSAFPID-9531120", "CSAFPID-9531121", "CSAFPID-9531124", "CSAFPID-9531125", "CSAFPID-9531127", "CSAFPID-9531128", "CSAFPID-9531129", "CSAFPID-9531130", "CSAFPID-9531131", "CSAFPID-9531132", "CSAFPID-9531133", "CSAFPID-9531134", "CSAFPID-9531135", "CSAFPID-9531136", "CSAFPID-9531137", "CSAFPID-9531138", "CSAFPID-9531139", "CSAFPID-9531140", "CSAFPID-9531141", "CSAFPID-9531142", "CSAFPID-9531143", "CSAFPID-9531144", "CSAFPID-9531145", "CSAFPID-9531146", "CSAFPID-9531147", "CSAFPID-9531148", "CSAFPID-9531149", "CSAFPID-9531153", "CSAFPID-9531154", "CSAFPID-9531156", "CSAFPID-9531157", "CSAFPID-9531158", "CSAFPID-9531160", "CSAFPID-9531161", "CSAFPID-9531162", "CSAFPID-9531163", "CSAFPID-9531164", "CSAFPID-9531165", "CSAFPID-9531166", "CSAFPID-9531167", "CSAFPID-9531168", "CSAFPID-9539913", "CSAFPID-9539914", "CSAFPID-9539915", "CSAFPID-9539916", "CSAFPID-9539917", "CSAFPID-9539918", "CSAFPID-9539919", "CSAFPID-9539921", "CSAFPID-9539922", "CSAFPID-9539923", "CSAFPID-9539924", "CSAFPID-9539925", "CSAFPID-9539926", "CSAFPID-9539927", "CSAFPID-9539928", "CSAFPID-9539929", "CSAFPID-9539930", "CSAFPID-9539931", "CSAFPID-9539932", "CSAFPID-9539933", "CSAFPID-9539934", "CSAFPID-9539935", "CSAFPID-9539936", "CSAFPID-9539937", "CSAFPID-9539938", "CSAFPID-9539939", "CSAFPID-9539940", "CSAFPID-9539941", "CSAFPID-9539942", "CSAFPID-9539943", "CSAFPID-9539944", "CSAFPID-9539945", "CSAFPID-9539946", "CSAFPID-9539947", "CSAFPID-9539948", "CSAFPID-9539949", "CSAFPID-9539950", "CSAFPID-9539951", "CSAFPID-9539952", "CSAFPID-9539953", "CSAFPID-9539954", "CSAFPID-9539955", "CSAFPID-9539956", "CSAFPID-9539957", "CSAFPID-9539958", "CSAFPID-9539959", "CSAFPID-9539977", "CSAFPID-9539978", "CSAFPID-9539979", "CSAFPID-9539980", "CSAFPID-9539981", "CSAFPID-9539982", "CSAFPID-9539983", "CSAFPID-9539984", "CSAFPID-9539985", "CSAFPID-9559042", "CSAFPID-9559043", "CSAFPID-9559044", "CSAFPID-9559045", "CSAFPID-9559046", "CSAFPID-9559047", "CSAFPID-9559048", "CSAFPID-9559049", "CSAFPID-9559050", "CSAFPID-9559702", "CSAFPID-9559703", "CSAFPID-9559704", "CSAFPID-9559705", "CSAFPID-9559706", "CSAFPID-9559707", "CSAFPID-9559708", "CSAFPID-9559709", "CSAFPID-9559710" ] }, "references": [ { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-59879.json?alt=media" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:79546" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:79366" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss" }, { "category": "external", "summary": "Source - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-59879" }, { "category": "external", "summary": "Source - debian", "url": "https://security-tracker.debian.org/tracker/CVE-2026-59879" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUBUNTU-CVE-2026-59879.json?alt=media" }, { "category": "external", "summary": "Source - github", "url": "https://api.github.com/advisories/GHSA-v56q-mh7h-f735" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2636.json" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-59879" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3376.json" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:69255" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:69289" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59879" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:72851" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:72850" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:72854" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:72712" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:74503" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:74384" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:74435" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:77656" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/npm%2FGHSA-v56q-mh7h-f735.json?alt=media" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0431" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/immutable-js/immutable-js/commit/a1a1ee412dcaa380ab325196283d06594ffe4b84" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/immutable-js/immutable-js/commit/f0bc997d8eb9886aff2236635aa210a95a04304a" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.9" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.8" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-v56q-mh7h-f735" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-59879" }, { "category": "external", "summary": "Reference - osv; redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-59879" }, { "category": "external", "summary": "Reference - github; osv; redhat", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59879" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/advisories/GHSA-v56q-mh7h-f735" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2636.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2636" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7282436" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7283059" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7285930" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7286986" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3376.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3376" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://confluence.atlassian.com/security/security-bulletin-september-15-2026-1822852209.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:68044" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:68006" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:68254" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:68253" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:68748" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:68756" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:68762" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:68755" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:68750" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:68747" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-59879" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498158" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:69255" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-13149" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-15792" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-15927" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-16221" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-18255" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-32283" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-33818" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-39822" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44705" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-49477" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-54058" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-54060" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-54770" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-55379" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-55380" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-56852" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-56853" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-56858" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-56859" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-56860" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-56862" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-57231" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-59197" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-59199" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-59200" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-59204" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-59205" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-59869" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-59885" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-59886" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-67213" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-67214" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-67313" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-67314" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-67320" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-67321" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-69152" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-73086" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-75593" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-82417" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-84375" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/updates/classification/" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69255.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:69289" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-71491" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-84292" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-84394" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-87776" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-9375" }, { "category": "external", "summary": "Reference - redhat", "url": "https://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69289.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:70267" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:70829" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:71113" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:71114" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:71179" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:83612" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:83598" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:67858" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:71675" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3623" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289775" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289776" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289778" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289779" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289780" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289783" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289785" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289788" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289789" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289790" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289792" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289794" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289795" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289796" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289797" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289798" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289800" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289787" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289791" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:72851" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2025-52881" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-25681" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-39829" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-41178" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-73500" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-84445" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72851.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:72850" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72850.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:72854" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2025-22866" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72854.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:72712" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-19534" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-47683" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-5038" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-55553" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-88932" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-89011" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-92000" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-92942" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-92958" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-92959" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-92961" }, { "category": "external", "summary": "Reference - redhat", "url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72712.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:74503" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "Reference - redhat", "url": "https://issues.redhat.com/browse/SAT-50183" }, { "category": "external", "summary": "Reference - redhat", "url": "https://issues.redhat.com/browse/SAT-50184" }, { "category": "external", "summary": "Reference - redhat", "url": "https://issues.redhat.com/browse/SAT-50185" }, { "category": "external", "summary": "Reference - redhat", "url": "https://issues.redhat.com/browse/SAT-50187" }, { "category": "external", "summary": "Reference - redhat", "url": "https://issues.redhat.com/browse/SAT-50584" }, { "category": "external", "summary": "Reference - redhat", "url": "https://issues.redhat.com/browse/SAT-50904" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74503.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:74633" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:74609" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:74511" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:63307" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:74384" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-27136" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-87114" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74384.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:74435" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-33814" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-75931" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74435.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:77656" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-17106" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-49825" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-77403" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-77404" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-77406" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-77409" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-77410" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-77412" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-79921" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77656.json" }, { "category": "external", "summary": "Reference - certbundde; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:79546" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-94603" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79546.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:79366" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79366.json" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59879.json" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.4" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:81110" } ], "remediations": [ { "category": "vendor_fix", "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-5278082", "CSAFPID-9368017" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:69255" }, { "category": "workaround", "details": "To mitigate this issue, applications should implement input validation to reject or clamp any externally supplied List index or key-path segment that exceeds a sane maximum, specifically values greater than or equal to 2^30. Additionally, running request handling in isolated worker processes with capped heap sizes (e.g., using `--max-old-space-size`) can contain the impact of a potential process abort.", "product_ids": [ "CSAFPID-5278082", "CSAFPID-9368017", "CSAFPID-9368018", "CSAFPID-9368019", "CSAFPID-9368020", "CSAFPID-9368021", "CSAFPID-9368022", "CSAFPID-9368023", "CSAFPID-9368024", "CSAFPID-9368025", "CSAFPID-9368026", "CSAFPID-2993424", "CSAFPID-9368128", "CSAFPID-9368129", "CSAFPID-5597382", "CSAFPID-9486014", "CSAFPID-9486015", "CSAFPID-9486016", "CSAFPID-9486017", "CSAFPID-9486018", "CSAFPID-9486019", "CSAFPID-9486020", "CSAFPID-9486021", "CSAFPID-9486022", "CSAFPID-9486023", "CSAFPID-9486024", "CSAFPID-9486025", "CSAFPID-9486026", "CSAFPID-9486027", "CSAFPID-9486028", "CSAFPID-9486029", "CSAFPID-9486030", "CSAFPID-9486031", "CSAFPID-9486032", "CSAFPID-9486033", "CSAFPID-9486034", "CSAFPID-9486035", "CSAFPID-9486036", "CSAFPID-9486037", "CSAFPID-9486038", "CSAFPID-9486039", "CSAFPID-9486040", "CSAFPID-9486041", "CSAFPID-9486042", "CSAFPID-9486043", "CSAFPID-5277976", "CSAFPID-9486049", "CSAFPID-9486050", "CSAFPID-9486051", "CSAFPID-9486052", "CSAFPID-9486053", "CSAFPID-9486054", "CSAFPID-9486055", "CSAFPID-9486056", "CSAFPID-9486057", "CSAFPID-9486058", "CSAFPID-9486059", "CSAFPID-9486060", "CSAFPID-9486061", "CSAFPID-9486062", "CSAFPID-9486063", "CSAFPID-9486064", "CSAFPID-9486065", "CSAFPID-9486066", "CSAFPID-9486067", "CSAFPID-9486068", "CSAFPID-9486069", "CSAFPID-9486070", "CSAFPID-9486071", "CSAFPID-9486072", "CSAFPID-9486073", "CSAFPID-9486074", "CSAFPID-9486075", "CSAFPID-5436299", "CSAFPID-9486293", "CSAFPID-9486294", "CSAFPID-9486295", "CSAFPID-9486296", "CSAFPID-9486297", "CSAFPID-9486298", "CSAFPID-9486299", "CSAFPID-9486300", "CSAFPID-9486301", "CSAFPID-9486302", "CSAFPID-9486303", "CSAFPID-9486304", "CSAFPID-9486305", "CSAFPID-9486306", "CSAFPID-9486307", "CSAFPID-9486308", "CSAFPID-9486309", "CSAFPID-9486310", "CSAFPID-9486311", "CSAFPID-9486312", "CSAFPID-9486313", "CSAFPID-9486314", "CSAFPID-9486315", "CSAFPID-9486316", "CSAFPID-9486317", "CSAFPID-9486318", "CSAFPID-9486319", "CSAFPID-8942316", "CSAFPID-9486995", "CSAFPID-7986588", "CSAFPID-9502291", "CSAFPID-9502292", "CSAFPID-9502293", "CSAFPID-9502294", "CSAFPID-9502295", "CSAFPID-9502296", "CSAFPID-9502297", "CSAFPID-9502298", "CSAFPID-9502299", "CSAFPID-9502300", "CSAFPID-9502301", "CSAFPID-9502302", "CSAFPID-9502303", "CSAFPID-9502304", "CSAFPID-9502305", "CSAFPID-9502306", "CSAFPID-9502307", "CSAFPID-9502308", "CSAFPID-9502309", "CSAFPID-9502310", "CSAFPID-9502311", "CSAFPID-9502312", "CSAFPID-9502313", "CSAFPID-9502314", "CSAFPID-9502315", "CSAFPID-9502316", "CSAFPID-9502317", "CSAFPID-9502318", "CSAFPID-9502319", "CSAFPID-9502320", "CSAFPID-9502321", "CSAFPID-5590735", "CSAFPID-9531117", "CSAFPID-9531118", "CSAFPID-9531119", "CSAFPID-9531120", "CSAFPID-9531121", "CSAFPID-9531124", "CSAFPID-9531125", "CSAFPID-9531126", "CSAFPID-9531127", "CSAFPID-9531128", "CSAFPID-9531129", "CSAFPID-9531130", "CSAFPID-9531131", "CSAFPID-9531132", "CSAFPID-9531133", "CSAFPID-9531134", "CSAFPID-9531135", "CSAFPID-9531136", "CSAFPID-9531137", "CSAFPID-9531138", "CSAFPID-9531139", "CSAFPID-9531140", "CSAFPID-9531141", "CSAFPID-9531142", "CSAFPID-9531143", "CSAFPID-9531144", "CSAFPID-9531145", "CSAFPID-9531146", "CSAFPID-9531147", "CSAFPID-9531148", "CSAFPID-9531149", "CSAFPID-9531153", "CSAFPID-9531154", "CSAFPID-9531156", "CSAFPID-9531157", "CSAFPID-9531158", "CSAFPID-9531160", "CSAFPID-9531161", "CSAFPID-9531162", "CSAFPID-9531163", "CSAFPID-9531164", "CSAFPID-9531165", "CSAFPID-9531166", "CSAFPID-9531167", "CSAFPID-9531168", "CSAFPID-3066877", "CSAFPID-9539913", "CSAFPID-9539914", "CSAFPID-9539915", "CSAFPID-9539916", "CSAFPID-9539917", "CSAFPID-9539918", "CSAFPID-9539919", "CSAFPID-9539920", "CSAFPID-9539921", "CSAFPID-9539922", "CSAFPID-9539923", "CSAFPID-9539924", "CSAFPID-9539925", "CSAFPID-9539926", "CSAFPID-9539927", "CSAFPID-9539928", "CSAFPID-9539929", "CSAFPID-9539930", "CSAFPID-9539931", "CSAFPID-9539932", "CSAFPID-9539933", "CSAFPID-9539934", "CSAFPID-9539935", "CSAFPID-9539936", "CSAFPID-9539937", "CSAFPID-9539938", "CSAFPID-9539939", "CSAFPID-9539940", "CSAFPID-9539941", "CSAFPID-9539942", "CSAFPID-9539943", "CSAFPID-9539944", "CSAFPID-9539945", "CSAFPID-9539946", "CSAFPID-9539947", "CSAFPID-9539948", "CSAFPID-9539949", "CSAFPID-9539950", "CSAFPID-9539951", "CSAFPID-9539952", "CSAFPID-9539953", "CSAFPID-9539954", "CSAFPID-9539955", "CSAFPID-9539956", "CSAFPID-9539957", "CSAFPID-9539958", "CSAFPID-9539959", "CSAFPID-5212154", "CSAFPID-9539976", "CSAFPID-9539977", "CSAFPID-9539978", "CSAFPID-9539979", "CSAFPID-9539980", "CSAFPID-9539981", "CSAFPID-9539982", "CSAFPID-9539983", "CSAFPID-9539984", "CSAFPID-9539985", "CSAFPID-5256659", "CSAFPID-9559041", "CSAFPID-9559042", "CSAFPID-9559043", "CSAFPID-9559044", "CSAFPID-9559045", "CSAFPID-9559046", "CSAFPID-9559047", "CSAFPID-9559048", "CSAFPID-9559049", "CSAFPID-9559050", "CSAFPID-8520420", "CSAFPID-9559701", "CSAFPID-9559702", "CSAFPID-9559703", "CSAFPID-9559704", "CSAFPID-9559705", "CSAFPID-9559706", "CSAFPID-9559707", "CSAFPID-9559708", "CSAFPID-9559709", "CSAFPID-9559710" ] }, { "category": "vendor_fix", "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.", "product_ids": [ "CSAFPID-2993424", "CSAFPID-9368129" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:69289" }, { "category": "vendor_fix", "details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.14/html/clusters/cluster_mce_overview#mce-install-intro", "product_ids": [ "CSAFPID-5597382", "CSAFPID-9486027" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:72851" }, { "category": "vendor_fix", "details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.11/html/clusters/cluster_mce_overview#mce-install-intro", "product_ids": [ "CSAFPID-5277976", "CSAFPID-9486059" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:72850" }, { "category": "vendor_fix", "details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/clusters/cluster_mce_overview#mce-install-intro", "product_ids": [ "CSAFPID-5436299", "CSAFPID-9486303" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:72854" }, { "category": "vendor_fix", "details": "For more about Ansible plugins for Red Hat Developer Hub, see References links", "product_ids": [ "CSAFPID-8942316", "CSAFPID-9486995" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:72712" }, { "category": "vendor_fix", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index", "product_ids": [ "CSAFPID-7986588", "CSAFPID-9502294", "CSAFPID-9502295", "CSAFPID-9502296", "CSAFPID-9502305", "CSAFPID-9502308", "CSAFPID-9502309", "CSAFPID-9502310", "CSAFPID-9502311", "CSAFPID-9502312", "CSAFPID-9502313", "CSAFPID-9502314", "CSAFPID-9502315", "CSAFPID-9502316", "CSAFPID-9502317" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:74503" }, { "category": "vendor_fix", "details": "See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/\n\nDetails on how to access this content are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html-single/updating_clusters/index#updating-cluster-cli.", "product_ids": [ "CSAFPID-5590735", "CSAFPID-9531126" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:74384" }, { "category": "vendor_fix", "details": "See the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nDetails on how to access this content are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.", "product_ids": [ "CSAFPID-3066877", "CSAFPID-9539920" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:74435" }, { "category": "vendor_fix", "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-5212154", "CSAFPID-9539976" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:77656" }, { "category": "vendor_fix", "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-5256659", "CSAFPID-9559041" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:79546" }, { "category": "vendor_fix", "details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-8520420", "CSAFPID-9559701" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:79366" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1317175", "CSAFPID-1331597", "CSAFPID-1337765", "CSAFPID-1337768", "CSAFPID-5768418", "CSAFPID-8575048", "CSAFPID-8575049", "CSAFPID-8579251", "CSAFPID-8579252", "CSAFPID-8579253", "CSAFPID-8579254", "CSAFPID-8579255", "CSAFPID-8579256", "CSAFPID-8579257", "CSAFPID-8579258", "CSAFPID-8579259", "CSAFPID-8579260", "CSAFPID-8579261", "CSAFPID-8579262", "CSAFPID-8579263", "CSAFPID-8579264", "CSAFPID-8579265", "CSAFPID-8579266", "CSAFPID-8579267", "CSAFPID-8579268", "CSAFPID-8579269", "CSAFPID-8579270", "CSAFPID-8579271", "CSAFPID-8579272", "CSAFPID-8579273", "CSAFPID-8579274", "CSAFPID-8579275", "CSAFPID-8579276", "CSAFPID-8579277", "CSAFPID-8579278", "CSAFPID-8579279", "CSAFPID-8579280", "CSAFPID-8579281", "CSAFPID-8579282", "CSAFPID-8579283", "CSAFPID-8579284", "CSAFPID-8579285", "CSAFPID-8579286", "CSAFPID-8579287", "CSAFPID-8579288", "CSAFPID-8579289", "CSAFPID-8579290", "CSAFPID-8579291", "CSAFPID-8579292", "CSAFPID-8579293", "CSAFPID-8579294", "CSAFPID-8579295", "CSAFPID-8579296", "CSAFPID-8579297", "CSAFPID-8579298", "CSAFPID-8579299", "CSAFPID-8579300", "CSAFPID-8579301", "CSAFPID-8579302", "CSAFPID-8579303", "CSAFPID-8579304", "CSAFPID-8579305", "CSAFPID-8579306", "CSAFPID-8579307", "CSAFPID-8579308", "CSAFPID-8579309", "CSAFPID-8579310", "CSAFPID-8579311", "CSAFPID-8579312", "CSAFPID-8579313", "CSAFPID-8579314", "CSAFPID-8579315", "CSAFPID-8579316", "CSAFPID-8579317", "CSAFPID-8579318", "CSAFPID-8579319", "CSAFPID-8579320", "CSAFPID-8579321", "CSAFPID-8579322", "CSAFPID-8579323", "CSAFPID-8579324", "CSAFPID-8579325", "CSAFPID-8579326", "CSAFPID-8579327", "CSAFPID-8579328", "CSAFPID-8579329", "CSAFPID-8579330", "CSAFPID-8579331", "CSAFPID-8579332", "CSAFPID-8579333", "CSAFPID-8579334", "CSAFPID-8579335", "CSAFPID-8579336", "CSAFPID-8596315", "CSAFPID-8596316", "CSAFPID-8596317", "CSAFPID-8596318", "CSAFPID-8596319", "CSAFPID-8596320", "CSAFPID-8596321", "CSAFPID-8596322", "CSAFPID-8596323", "CSAFPID-8596324", "CSAFPID-8596325", "CSAFPID-8596326", "CSAFPID-8596327", "CSAFPID-8596328", "CSAFPID-8619165", "CSAFPID-8619166", "CSAFPID-8873354", "CSAFPID-8930147", "CSAFPID-9012406", "CSAFPID-9012408", "CSAFPID-9119849", "CSAFPID-9329664", "CSAFPID-9329665", "CSAFPID-9329666", "CSAFPID-9329667", "CSAFPID-9329668", "CSAFPID-9329669", "CSAFPID-9329670", "CSAFPID-9329671", "CSAFPID-9329672", "CSAFPID-9329673", "CSAFPID-9329674", "CSAFPID-9329675", "CSAFPID-9329676", "CSAFPID-9329677", "CSAFPID-9329678", "CSAFPID-9332036", "CSAFPID-9485661", "CSAFPID-9485662", "CSAFPID-9485663" ] } ], "title": "CVE-2026-59879" } ] }