{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-82562", "tracking": { "current_release_date": "2026-10-16T12:45:07.946149Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-82562", "initial_release_date": "2026-08-30T00:38:36.237701Z", "revision_history": [ { "date": "2026-08-30T00:38:36.237701Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (3).| CWES updated (1)." }, { "date": "2026-08-30T00:38:46.721615Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-08-30T01:26:09.621609Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (3).| CWES updated (1)." }, { "date": "2026-08-30T01:26:15.844446Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-08-30T07:34:58.268164Z", "number": "5", "summary": "NCSC Score updated." }, { "date": "2026-08-30T12:12:41.574373Z", "number": "6", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (67).| References created (6).| CWES updated (1)." }, { "date": "2026-08-30T12:12:50.096356Z", "number": "7", "summary": "NCSC Score updated." }, { "date": "2026-08-30T12:21:03.155865Z", "number": "8", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| References created (3).| CWES updated (1)." }, { "date": "2026-08-30T12:43:50.286601Z", "number": "9", "summary": "Source created.| CVE status created. (valid)| Description created for source.| Products connected (2)." }, { "date": "2026-08-30T12:43:59.922520Z", "number": "10", "summary": "NCSC Score updated." }, { "date": "2026-08-31T06:44:41.505057Z", "number": "11", "summary": "Products connected (1)." }, { "date": "2026-08-31T17:40:40.153069Z", "number": "12", "summary": "Unknown change." }, { "date": "2026-08-31T17:40:46.745052Z", "number": "13", "summary": "NCSC Score updated." }, { "date": "2026-09-01T23:00:22.805439Z", "number": "14", "summary": "Description removed for source.| Products removed (1)." }, { "date": "2026-09-01T23:00:23.831898Z", "number": "15", "summary": "NCSC Score updated." }, { "date": "2026-09-02T02:03:52.559629Z", "number": "16", "summary": "Description created for source." }, { "date": "2026-09-02T10:19:13.480800Z", "number": "17", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-02T12:38:16.021851Z", "number": "18", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (3).| Product Identifiers created (48).| Products connected (192).| References created (5).| CWES updated (1).| Vendor_assessment created." }, { "date": "2026-09-02T15:39:52.043428Z", "number": "19", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (5).| CWES updated (1)." }, { "date": "2026-09-02T15:39:54.396136Z", "number": "20", "summary": "NCSC Score updated." }, { "date": "2026-09-02T18:21:14.045179Z", "number": "21", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (4).| CWES updated (1)." }, { "date": "2026-09-04T00:28:59.838508Z", "number": "22", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| Product Remediations created (4).| Product Identifiers created (3).| Product Identifiers removed (3).| References created (12).| CWES updated (1)." }, { "date": "2026-09-04T00:29:01.852428Z", "number": "23", "summary": "NCSC Score updated." }, { "date": "2026-09-05T07:14:12.141750Z", "number": "24", "summary": "Products removed (63)." }, { "date": "2026-09-07T07:34:06.966110Z", "number": "25", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T12:23:34.261737Z", "number": "26", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T12:23:46.360325Z", "number": "27", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T12:23:57.334472Z", "number": "28", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T12:23:58.778493Z", "number": "29", "summary": "NCSC Score updated." }, { "date": "2026-09-09T12:24:43.008384Z", "number": "30", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T12:25:19.286203Z", "number": "31", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T12:25:42.999080Z", "number": "32", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T12:27:32.675902Z", "number": "33", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T12:28:04.452621Z", "number": "34", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T12:50:39.371030Z", "number": "35", "summary": "NCSC Score updated." }, { "date": "2026-09-09T15:17:33.914617Z", "number": "36", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-09T15:17:35.411397Z", "number": "37", "summary": "NCSC Score updated." }, { "date": "2026-09-24T15:20:25.497011Z", "number": "38", "summary": "EPSS updated." }, { "date": "2026-09-24T15:20:29.585760Z", "number": "39", "summary": "NCSC Score updated." }, { "date": "2026-09-28T11:33:10.617049Z", "number": "40", "summary": "Source connected.| CVE status created. (valid)| Products connected (2).| References created (3)." }, { "date": "2026-09-28T11:33:13.988138Z", "number": "41", "summary": "NCSC Score updated." }, { "date": "2026-09-29T12:20:41.840502Z", "number": "42", "summary": "Source connected.| CVE status created. (valid)| Products connected (3).| References created (21)." }, { "date": "2026-09-29T12:51:14.445475Z", "number": "43", "summary": "NCSC Score updated." }, { "date": "2026-09-29T15:26:34.673089Z", "number": "44", "summary": "EPSS created.| Unknown change." }, { "date": "2026-10-05T11:29:54.874896Z", "number": "45", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-10-05T11:30:04.190908Z", "number": "46", "summary": "NCSC Score updated." }, { "date": "2026-10-12T08:07:55.711992Z", "number": "47", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-10-12T08:07:57.240026Z", "number": "48", "summary": "NCSC Score updated." }, { "date": "2026-10-16T06:19:42.995647Z", "number": "49", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-10-16T06:19:53.837521Z", "number": "50", "summary": "NCSC Score updated." }, { "date": "2026-10-16T12:22:23.916464Z", "number": "51", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-10-16T12:23:13.625238Z", "number": "52", "summary": "NCSC Score updated." } ], "status": "interim", "version": "52" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<12.0.12.30", "product": { "name": "vers:unknown/<12.0.12.30", "product_id": "CSAFPID-9477920" } }, { "category": "product_version_range", "name": "vers:unknown/<13.0.9.0", "product": { "name": "vers:unknown/<13.0.9.0", "product_id": "CSAFPID-9477921" } } ], "category": "product_name", "name": "App Connect Enterprise" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<10.5.0.23", "product": { "name": "vers:unknown/<10.5.0.23", "product_id": "CSAFPID-9485661" } }, { "category": "product_version_range", "name": "vers:unknown/<10.6.0.11", "product": { "name": "vers:unknown/<10.6.0.11", "product_id": "CSAFPID-9485662" } }, { "category": "product_version_range", "name": "vers:unknown/<11.0.0.3", "product": { "name": "vers:unknown/<11.0.0.3", "product_id": "CSAFPID-9485663" } } ], "category": "product_name", "name": "DataPower Gateway" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1337768", "product_identification_helper": { "cpe": "cpe:/a:ibm:business_automation_workflow:-" } } } ], "category": "product_name", "name": "IBM Business Automation Workflow" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-5211181", "product_identification_helper": { "cpe": "cpe:/a:ibm:websphere_service_registry_and_repository:-" } } } ], "category": "product_name", "name": "IBM WebSphere Service Registry and Repository" } ], "category": "vendor", "name": "IBM" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-9108360", "product_identification_helper": { "cpe": "cpe:/a:redhat:cost_management_on_premise:1" } } } ], "category": "product_name", "name": "Cost Management On Premise" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-2552001", "product_identification_helper": { "cpe": "cpe:/a:redhat:cryostat:4" } } } ], "category": "product_name", "name": "Cryostat 4" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-2914692", "product_identification_helper": { "cpe": "cpe:/a:redhat:gatekeeper:3" } } } ], "category": "product_name", "name": "Gatekeeper 3" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-5222660", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhmt:1" } } } ], "category": "product_name", "name": "Migration Toolkit For Containers" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-4994901", "product_identification_helper": { "cpe": "cpe:/a:redhat:migration_toolkit_applications:8" } } } ], "category": "product_name", "name": "Migration Toolkit for Applications 8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1441056", "product_identification_helper": { "cpe": "cpe:/a:redhat:multicluster_engine" } } } ], "category": "product_name", "name": "Multicluster Engine for Kubernetes" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/0", "product": { "name": "vers:rpm/0", "product_id": "CSAFPID-5222661", "product_identification_helper": { "cpe": "cpe:/a:redhat:workload_availability_nhc:0" } } } ], "category": "product_name", "name": "Node HealthCheck Operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2524222", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_lightspeed" } } } ], "category": "product_name", "name": "OpenShift Lightspeed" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-1919971", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_pipelines:1" } } } ], "category": "product_name", "name": "OpenShift Pipelines" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-1441076", "product_identification_helper": { "cpe": "cpe:/a:redhat:serverless:1" } } } ], "category": "product_name", "name": "OpenShift Serverless" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-2942231", "product_identification_helper": { "cpe": "cpe:/a:redhat:service_mesh:3" } } } ], "category": "product_name", "name": "OpenShift Service Mesh 3" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-1439310", "product_identification_helper": { "cpe": "cpe:/a:redhat:red_hat_3scale_amp:2" } } } ], "category": "product_name", "name": "Red Hat 3scale API Management Platform 2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/7", "product": { "name": "vers:rpm/7", "product_id": "CSAFPID-1439334", "product_identification_helper": { "cpe": "cpe:/a:redhat:amq_broker:7" } } } ], "category": "product_name", "name": "Red Hat AMQ Broker 7" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-1441080", "product_identification_helper": { "cpe": "cpe:/a:redhat:acm:2" } } } ], "category": "product_name", "name": "Red Hat Advanced Cluster Management for Kubernetes 2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-1441083", "product_identification_helper": { "cpe": "cpe:/a:redhat:advanced_cluster_security:4" } } } ], "category": "product_name", "name": "Red Hat Advanced Cluster Security 4" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-1508257", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2" } } } ], "category": "product_name", "name": "Red Hat Ansible Automation Platform 2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-5940623", "product_identification_helper": { "cpe": "cpe:/a:redhat:podman_desktop:1" } } } ], "category": "product_name", "name": "Red Hat Build of Podman Desktop" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-2847219", "product_identification_helper": { "cpe": "cpe:/a:redhat:ceph_storage:4" } } } ], "category": "product_name", "name": "Red Hat Ceph Storage 4" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/6", "product": { "name": "vers:rpm/6", "product_id": "CSAFPID-1455870", "product_identification_helper": { "cpe": "cpe:/a:redhat:ceph_storage:6" } } } ], "category": "product_name", "name": "Red Hat Ceph Storage 6" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/7", "product": { "name": "vers:rpm/7", "product_id": "CSAFPID-1441094", "product_identification_helper": { "cpe": "cpe:/a:redhat:ceph_storage:7" } } } ], "category": "product_name", "name": "Red Hat Ceph Storage 7" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-1455873", "product_identification_helper": { "cpe": "cpe:/a:redhat:ceph_storage:8" } } } ], "category": "product_name", "name": "Red Hat Ceph Storage 8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/9", "product": { "name": "vers:rpm/9", "product_id": "CSAFPID-5182138", "product_identification_helper": { "cpe": "cpe:/a:redhat:ceph_storage:9" } } } ], "category": "product_name", "name": "Red Hat Ceph Storage 9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-2914823", "product_identification_helper": { "cpe": "cpe:/a:redhat:connectivity_link:1" } } } ], "category": "product_name", "name": "Red Hat Connectivity Link 1" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-1439292", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_data_grid:8" } } } ], "category": "product_name", "name": "Red Hat Data Grid 8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-1508265", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhdh:1" } } } ], "category": "product_name", "name": "Red Hat Developer Hub" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-3049534", "product_identification_helper": { "cpe": "cpe:/a:redhat:discovery:2::el9" } } } ], "category": "product_name", "name": "Red Hat Discovery 2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/10", "product": { "name": "vers:rpm/10", "product_id": "CSAFPID-2858634", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/7", "product": { "name": "vers:rpm/7", "product_id": "CSAFPID-1439315", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 7" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-1439317", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/9", "product": { "name": "vers:rpm/9", "product_id": "CSAFPID-1439319", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-5198605", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux_ai:3" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux AI (RHEL AI) 3" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/7", "product": { "name": "vers:rpm/7", "product_id": "CSAFPID-1439294", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_fuse:7" } } } ], "category": "product_name", "name": "Red Hat Fuse 7" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-6154979", "product_identification_helper": { "cpe": "cpe:/a:redhat:hummingbird:1" } } } ], "category": "product_name", "name": "Red Hat Hardened Images" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-6039395" } } ], "category": "product_name", "name": "dotnet8.0" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8902830" } } ], "category": "product_name", "name": "grafana12.4" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8902831" } } ], "category": "product_name", "name": "grafana13.1" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/13.2.1-0.1.hum1", "product": { "name": "vers:rpm/13.2.1-0.1.hum1", "product_id": "CSAFPID-9125369", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana13.2@13.2.1-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms" } } }, { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9053231" } } ], "category": "product_name", "name": "grafana13.2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8505503" } } ], "category": "product_name", "name": "nodejs20" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8505504" } } ], "category": "product_name", "name": "nodejs22" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8476917" } } ], "category": "product_name", "name": "nodejs24" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-6239276" } } ], "category": "product_name", "name": "nodejs25" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8476920" } } ], "category": "product_name", "name": "nodejs26" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8902832" } } ], "category": "product_name", "name": "prometheus3.13" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-6027434" } } ], "category": "product_name", "name": "python3.14" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-6239277" } } ], "category": "product_name", "name": "yarnpkg" } ], "category": "product_family", "name": "Red Hat Hardened Images" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-6014972", "product_identification_helper": { "cpe": "cpe:/a:redhat:hummingbird:1" } } } ], "category": "product_name", "name": "Red Hat Hardened Images" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/7", "product": { "name": "vers:rpm/7", "product_id": "CSAFPID-1439300", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7" } } } ], "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform 7" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1439279", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_ai" } } } ], "category": "product_name", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-1439328", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4" } } } ], "category": "product_name", "name": "Red Hat OpenShift Container Platform 4" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-1441150", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_devspaces:3" } } } ], "category": "product_name", "name": "Red Hat OpenShift Dev Spaces" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-1439281", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_gitops:1" } } } ], "category": "product_name", "name": "Red Hat OpenShift GitOps" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/17.1", "product": { "name": "vers:rpm/17.1", "product_id": "CSAFPID-1441193", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:17.1" } } } ], "category": "product_name", "name": "Red Hat OpenStack Platform 17.1" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-1441147", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_data_foundation:4" } } } ], "category": "product_name", "name": "Red Hat Openshift Data Foundation 4" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-1441200", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3" } } } ], "category": "product_name", "name": "Red Hat Quay 3" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/6", "product": { "name": "vers:rpm/6", "product_id": "CSAFPID-1439313", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6" } } } ], "category": "product_name", "name": "Red Hat Satellite 6" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-1441204", "product_identification_helper": { "cpe": "cpe:/a:redhat:trusted_artifact_signer:1" } } } ], "category": "product_name", "name": "Red Hat Trusted Artifact Signer" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-2878788", "product_identification_helper": { "cpe": "cpe:/a:redhat:trusted_profile_analyzer:2" } } }, { "category": "product_version_range", "name": "vers:rpm/3", "product": { "name": "vers:rpm/3", "product_id": "CSAFPID-8902834", "product_identification_helper": { "cpe": "cpe:/a:redhat:trusted_profile_analyzer:3" } } } ], "category": "product_name", "name": "Red Hat Trusted Profile Analyzer" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-1439286", "product_identification_helper": { "cpe": "cpe:/a:redhat:camel_spring_boot:4" } } } ], "category": "product_name", "name": "Red Hat build of Apache Camel for Spring Boot 4" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/0", "product": { "name": "vers:rpm/0", "product_id": "CSAFPID-8902836", "product_identification_helper": { "cpe": "cpe:/a:redhat:secrets_management_console:0" } } } ], "category": "product_name", "name": "Secrets Management Console for Red Hat OpenShift" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-5486263", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_portal:2" } } } ], "category": "product_name", "name": "Self-service automation portal 2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8930216" } } ], "category": "product_name", "name": "amq-broker-bin.zip" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8930217" } } ], "category": "product_name", "name": "amq-broker-maven-repository.zip" } ], "category": "product_family", "name": "Red Hat AMQ Broker 7" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1439282" } } ], "category": "product_name", "name": "argocd-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2847218" } } ], "category": "product_name", "name": "argocd-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8991281" } } ], "category": "product_name", "name": "microshift-gitops" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8991282" } } ], "category": "product_name", "name": "openshift-gitops-argocd-cli" } ], "category": "product_family", "name": "Red Hat OpenShift GitOps" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1508264" } } ], "category": "product_name", "name": "automation-controller" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1837472" } } ], "category": "product_name", "name": "automation-eda-controller" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1837473" } } ], "category": "product_name", "name": "automation-gateway" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222698" } } ], "category": "product_name", "name": "automation-platform-ui" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1508261" } } ], "category": "product_name", "name": "lightspeed-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5009266" } } ], "category": "product_name", "name": "lightspeed-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5449645" } } ], "category": "product_name", "name": "mcp-server-rhel9" } ], "category": "product_family", "name": "Red Hat Ansible Automation Platform 2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5486265" } } ], "category": "product_name", "name": "automation-portal" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8334394" } } ], "category": "product_name", "name": "bootc-automation-portal-rhel9" } ], "category": "product_family", "name": "Self-service automation portal 2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5205180" } } ], "category": "product_name", "name": "bootc-cuda-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-7220367" } } ], "category": "product_name", "name": "bootc-gaudi-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811351" } } ], "category": "product_name", "name": "bootc-rocm-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5205182" } } ], "category": "product_name", "name": "disk-image-cuda-rhel9" } ], "category": "product_family", "name": "Red Hat Enterprise Linux AI (RHEL AI) 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2652731" } } ], "category": "product_name", "name": "ceph" } ], "category": "product_family", "name": "Red Hat Ceph Storage 6" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2485161" } } ], "category": "product_name", "name": "ceph" } ], "category": "product_family", "name": "Red Hat Ceph Storage 7" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2485163" } } ], "category": "product_name", "name": "ceph" } ], "category": "product_family", "name": "Red Hat Ceph Storage 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5454788" } } ], "category": "product_name", "name": "ceph" } ], "category": "product_family", "name": "Red Hat Ceph Storage 9" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2942229" } } ], "category": "product_name", "name": "ceph" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2868420" } } ], "category": "product_name", "name": "grafana" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2914839" } } ], "category": "product_name", "name": "grafana-pcp" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5449646" } } ], "category": "product_name", "name": "linux-sgx" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5438677" } } ], "category": "product_name", "name": "nodejs22" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5438679" } } ], "category": "product_name", "name": "nodejs24" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9104702" } } ], "category": "product_name", "name": "nodejs26" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2895507" } } ], "category": "product_name", "name": "pcs" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8991287" } } ], "category": "product_name", "name": "cockpit-ceph-installer" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9105550" } } ], "category": "product_name", "name": "rhceph-4-dashboard-rhel8" } ], "category": "product_family", "name": "Red Hat Ceph Storage 4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2467450" } } ], "category": "product_name", "name": "code-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2467451" } } ], "category": "product_name", "name": "dashboard-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3036143" } } ], "category": "product_name", "name": "jetbrains-ide-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-4534155" } } ], "category": "product_name", "name": "openvsx-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2577689" } } ], "category": "product_name", "name": "pluginregistry-rhel9" } ], "category": "product_family", "name": "Red Hat OpenShift Dev Spaces" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2778177" } } ], "category": "product_name", "name": "console-mce-rhel9" } ], "category": "product_family", "name": "Multicluster Engine for Kubernetes" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8902837" } } ], "category": "product_name", "name": "console-plugin-rhel9" } ], "category": "product_family", "name": "Secrets Management Console for Red Hat OpenShift" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2109918" } } ], "category": "product_name", "name": "console-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3036166" } } ], "category": "product_name", "name": "volsync-operator-bundle" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2485158" } } ], "category": "product_name", "name": "volsync-rhel9" } ], "category": "product_family", "name": "Red Hat Advanced Cluster Management for Kubernetes 2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9108361" } } ], "category": "product_name", "name": "costmanagement-ui-rhel10" } ], "category": "product_family", "name": "Cost Management On Premise" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2985382" } } ], "category": "product_name", "name": "cryostat-openshift-console-plugin-rhel9" } ], "category": "product_family", "name": "Cryostat 4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3112100" } } ], "category": "product_name", "name": "discovery-ui-rhel9" } ], "category": "product_family", "name": "Red Hat Discovery 2" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1780157" } } ], "category": "product_name", "name": "dotnet6.0" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1459359" } } ], "category": "product_name", "name": "dotnet7.0" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1496261" } } ], "category": "product_name", "name": "grafana" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1919996" } } ], "category": "product_name", "name": "grafana-pcp" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5449647" } } ], "category": "product_name", "name": "linux-sgx" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2652741" } } ], "category": "product_name", "name": "nodejs" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2109953" } } ], "category": "product_name", "name": "pcs" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2914693" } } ], "category": "product_name", "name": "gatekeeper-rhel9" } ], "category": "product_family", "name": "Gatekeeper 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1663145" } } ], "category": "product_name", "name": "grafana" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1919990" } } ], "category": "product_name", "name": "grafana-pcp" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2631284" } } ], "category": "product_name", "name": "mozjs60" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2109952" } } ], "category": "product_name", "name": "pcs" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222941" } } ], "category": "product_name", "name": "iop-remediations-rhel9" } ], "category": "product_family", "name": "Red Hat Satellite 6" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8939163" } } ], "category": "product_name", "name": "jboss-eap-full-maven-repository.zip" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8939164" } } ], "category": "product_name", "name": "jboss-eap-incremental-maven-repository.zip" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8939165" } } ], "category": "product_name", "name": "jboss-eap-maven-repository.zip" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8939166" } } ], "category": "product_name", "name": "jboss-eap-patch.zip" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8939167" } } ], "category": "product_name", "name": "jboss-eap-runtime-maven-repository.zip" } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform 7" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2985384" } } ], "category": "product_name", "name": "kiali-operator-bundle" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2985387" } } ], "category": "product_name", "name": "kiali-rhel9-operator" } ], "category": "product_family", "name": "OpenShift Service Mesh 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222926" } } ], "category": "product_name", "name": "kn-eventing-integrations-aws-ddb-streams-source-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222927" } } ], "category": "product_name", "name": "kn-eventing-integrations-aws-s3-sink-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222928" } } ], "category": "product_name", "name": "kn-eventing-integrations-aws-s3-source-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222929" } } ], "category": "product_name", "name": "kn-eventing-integrations-aws-sns-sink-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222930" } } ], "category": "product_name", "name": "kn-eventing-integrations-aws-sqs-sink-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222931" } } ], "category": "product_name", "name": "kn-eventing-integrations-aws-sqs-source-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222933" } } ], "category": "product_name", "name": "kn-eventing-integrations-log-sink-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222934" } } ], "category": "product_name", "name": "kn-eventing-integrations-timer-source-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222935" } } ], "category": "product_name", "name": "kn-eventing-integrations-transform-jsonata-rhel9" } ], "category": "product_family", "name": "OpenShift Serverless" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8513518" } } ], "category": "product_name", "name": "lightspeed-agentic-console-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-6239270" } } ], "category": "product_name", "name": "lightspeed-console-plugin-419-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222662" } } ], "category": "product_name", "name": "lightspeed-console-plugin-pf5-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1851477" } } ], "category": "product_name", "name": "lightspeed-console-plugin-rhel9" } ], "category": "product_family", "name": "OpenShift Lightspeed" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2985390" } } ], "category": "product_name", "name": "mcg-core-rhel9" } ], "category": "product_family", "name": "Red Hat Openshift Data Foundation 4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5157272" } } ], "category": "product_name", "name": "mta-solution-server-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222902" } } ], "category": "product_name", "name": "mta-ui-rhel9" } ], "category": "product_family", "name": "Migration Toolkit for Applications 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3086230" } } ], "category": "product_name", "name": "node-healthcheck-must-gather-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1496215" } } ], "category": "product_name", "name": "node-healthcheck-operator-bundle" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3120253" } } ], "category": "product_name", "name": "node-healthcheck-rhel9-operator" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3036144" } } ], "category": "product_name", "name": "node-remediation-console-rhel8" } ], "category": "product_family", "name": "Node HealthCheck Operator" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9105553" } } ], "category": "product_name", "name": "odh-core-bff-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9105554" } } ], "category": "product_name", "name": "odh-dashboard-operator-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2933419" } } ], "category": "product_name", "name": "odh-dashboard-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2976378" } } ], "category": "product_name", "name": "odh-feature-server-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5811359" } } ], "category": "product_name", "name": "odh-mlflow-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9105555" } } ], "category": "product_name", "name": "odh-mod-arch-agent-ops-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-7666647" } } ], "category": "product_name", "name": "odh-mod-arch-automl-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-7666648" } } ], "category": "product_name", "name": "odh-mod-arch-autorag-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-7666649" } } ], "category": "product_name", "name": "odh-mod-arch-eval-hub-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222758" } } ], "category": "product_name", "name": "odh-mod-arch-gen-ai-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5901550" } } ], "category": "product_name", "name": "odh-mod-arch-maas-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-7666650" } } ], "category": "product_name", "name": "odh-mod-arch-mlflow-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5157328" } } ], "category": "product_name", "name": "odh-mod-arch-model-registry-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5068114" } } ], "category": "product_name", "name": "odh-workbench-codeserver-datascience-cpu-py312-rhel9" } ], "category": "product_family", "name": "Red Hat OpenShift AI (RHOAI)" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2467434" } } ], "category": "product_name", "name": "openshift-migration-ui-rhel8" } ], "category": "product_family", "name": "Migration Toolkit for Containers" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5198604" } } ], "category": "product_name", "name": "ose-agent-installer-ui-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1441120" } } ], "category": "product_name", "name": "ose-console" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2847216" } } ], "category": "product_name", "name": "ose-console-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2159493" } } ], "category": "product_name", "name": "ose-monitoring-plugin-rhel9" } ], "category": "product_family", "name": "Red Hat OpenShift Container Platform 4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-7987391" } } ], "category": "product_name", "name": "pipelines-console-plugin-pf5-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2847200" } } ], "category": "product_name", "name": "pipelines-console-plugin-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2847201" } } ], "category": "product_name", "name": "pipelines-console-plugin-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2467437" } } ], "category": "product_name", "name": "pipelines-hub-ui-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-2847215" } } ], "category": "product_name", "name": "pipelines-hub-ui-rhel9" } ], "category": "product_family", "name": "OpenShift Pipelines" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8490126" } } ], "category": "product_name", "name": "qpid-dispatch" } ], "category": "product_family", "name": "Red Hat OpenStack Platform 17.1" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9108372" } } ], "category": "product_name", "name": "qs" } ], "category": "product_family", "name": "Red Hat Fuse 7" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1455906" } } ], "category": "product_name", "name": "quay-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5355695" } } ], "category": "product_name", "name": "quay-rhel9" } ], "category": "product_family", "name": "Red Hat Quay 3" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8927911" } } ], "category": "product_name", "name": "red-hat-developer-hub-backstage-plugin-lightspeed" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8927912" } } ], "category": "product_name", "name": "red-hat-developer-hub-backstage-plugin-lightspeed-backend" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8927913" } } ], "category": "product_name", "name": "red-hat-developer-hub-backstage-plugin-orchestrator" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8927914" } } ], "category": "product_name", "name": "red-hat-developer-hub-backstage-plugin-orchestrator-backend" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8927915" } } ], "category": "product_name", "name": "red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8927916" } } ], "category": "product_name", "name": "red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8927917" } } ], "category": "product_name", "name": "red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1508266" } } ], "category": "product_name", "name": "rhdh-hub-rhel9" } ], "category": "product_family", "name": "Red Hat Developer Hub" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8930218" } } ], "category": "product_name", "name": "redhat-datagrid-maven-repository.zip" } ], "category": "product_family", "name": "Red Hat Data Grid 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-6239273" } } ], "category": "product_name", "name": "rh-podman-desktop.git" } ], "category": "product_family", "name": "Red Hat Build of Podman Desktop" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1441085" } } ], "category": "product_name", "name": "rhacs-main-rhel8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8490091" } } ], "category": "product_name", "name": "rhacs-main-rhel9" } ], "category": "product_family", "name": "Red Hat Advanced Cluster Security 4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8935769" } } ], "category": "product_name", "name": "rhaf-camel-for-springboot-maven-repository.zip" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8935770" } } ], "category": "product_name", "name": "rhaf-camel-maven-repository.zip" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8935771" } } ], "category": "product_name", "name": "rhaf-camel-spring-boot-maven-repository.zip" } ], "category": "product_family", "name": "Red Hat build of Apache Camel for Spring Boot 4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5222713" } } ], "category": "product_name", "name": "rhcl-console-plugin-rhel9" } ], "category": "product_family", "name": "Red Hat Connectivity Link 1" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5386578" } } ], "category": "product_name", "name": "rhtas-console-ui-rhel9" } ], "category": "product_family", "name": "Red Hat Trusted Artifact Signer" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8902835" } } ], "category": "product_name", "name": "rhtpa-rhel10" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832822" } } ], "category": "product_name", "name": "rhtpa-trustification-service-rhel9" } ], "category": "product_family", "name": "Red Hat Trusted Profile Analyzer" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8519306" } } ], "category": "product_name", "name": "subscription-manager" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 7" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-5360342" } } ], "category": "product_name", "name": "system-rhel8" } ], "category": "product_family", "name": "Red Hat 3scale API Management Platform 2" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317177", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "product_name", "name": "Oracle Linux" } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/unknown", "product": { "name": "vers:deb/unknown", "product_id": "CSAFPID-5313996" } } ], "category": "product_name", "name": "node-qs" } ], "category": "product_family", "name": "bookworm" } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:semver/6.14.2|<6.16.0", "product": { "name": "vers:semver/6.14.2|<6.16.0", "product_id": "CSAFPID-9096391" } }, { "category": "product_version_range", "name": "vers:unknown/>=6.14.2|<6.16.0", "product": { "name": "vers:unknown/>=6.14.2|<6.16.0", "product_id": "CSAFPID-9111863" } }, { "category": "product_version_range", "name": "vers:unknown/>=6.7.0|<6.14.2", "product": { "name": "vers:unknown/>=6.7.0|<6.14.2", "product_id": "CSAFPID-5627272" } }, { "category": "product_version_range", "name": "vers:unknown/v6.14.2", "product": { "name": "vers:unknown/v6.14.2", "product_id": "CSAFPID-8720843" } }, { "category": "product_version_range", "name": "vers:unknown/v6.15.0", "product": { "name": "vers:unknown/v6.15.0", "product_id": "CSAFPID-8720842" } }, { "category": "product_version_range", "name": "vers:unknown/v6.15.1", "product": { "name": "vers:unknown/v6.15.1", "product_id": "CSAFPID-8720841" } }, { "category": "product_version_range", "name": "vers:unknown/v6.15.2", "product": { "name": "vers:unknown/v6.15.2", "product_id": "CSAFPID-9099196" } }, { "category": "product_version_range", "name": "vers:unknown/v6.15.3", "product": { "name": "vers:unknown/v6.15.3", "product_id": "CSAFPID-9100561" } } ], "category": "product_name", "name": "qs" } ], "category": "vendor", "name": "ljharb" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-82562", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "### Summary\nThe `arrayLimit` option in qs does not enforce limits for comma-separated values when `comma: true` is enabled, allowing attackers to cause denial-of-service via memory exhaustion. This is a bypass of the array limit enforcement, similar to the bracket notation bypass addressed in GHSA-6rw7-vpxm-498p (CVE-2025-15284).\n\n### Details\nWhen the `comma` option is set to `true` (not the default, but configurable in applications), qs allows parsing comma-separated strings as arrays (e.g., `?param=a,b,c` becomes `['a', 'b', 'c']`). However, the limit check for `arrayLimit` (default: 20) and the optional throwOnLimitExceeded occur after the comma-handling logic in `parseArrayValue`, enabling a bypass. This permits creation of arbitrarily large arrays from a single parameter, leading to excessive memory allocation.\n\n**Vulnerable code** (lib/parse.js: lines ~40-50):\n```js\nif (val && typeof val === 'string' && options.comma && val.indexOf(',') > -1) {\n return val.split(',');\n}\n\nif (options.throwOnLimitExceeded && currentArrayLength >= options.arrayLimit) {\n throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');\n}\n\nreturn val;\n```\nThe `split(',')` returns the array immediately, skipping the subsequent limit check. Downstream merging via `utils.combine` does not prevent allocation, even if it marks overflows for sparse arrays.This discrepancy allows attackers to send a single parameter with millions of commas (e.g., `?param=,,,,,,,,...`), allocating massive arrays in memory without triggering limits. It bypasses the intent of `arrayLimit`, which is enforced correctly for indexed (`a[0]=`) and bracket (`a[]=`) notations (the latter fixed in v6.14.1 per GHSA-6rw7-vpxm-498p).\n\n### PoC\n**Test 1 - Basic bypass:**\n```\nnpm install qs\n```\n\n```js\nconst qs = require('qs');\n\nconst payload = 'a=' + ','.repeat(25); // 26 elements after split (bypasses arrayLimit: 5)\nconst options = { comma: true, arrayLimit: 5, throwOnLimitExceeded: true };\n\ntry {\n const result = qs.parse(payload, options);\n console.log(result.a.length); // Outputs: 26 (bypass successful)\n} catch (e) {\n console.log('Limit enforced:', e.message); // Not thrown\n}\n```\n**Configuration:**\n- `comma: true`\n- `arrayLimit: 5`\n- `throwOnLimitExceeded: true`\n\nExpected: Throws \"Array limit exceeded\" error.\nActual: Parses successfully, creating an array of length 26.\n\n\n### Impact\nDenial of Service (DoS) via memory exhaustion.\n\n### Suggested Fix\nMove the `arrayLimit` check before the comma split in `parseArrayValue`, and enforce it on the resulting array length. Use `currentArrayLength` (already calculated upstream) for consistency with bracket notation fixes.\n\n**Current code** (lib/parse.js: lines ~40-50):\n```js\nif (val && typeof val === 'string' && options.comma && val.indexOf(',') > -1) {\n return val.split(',');\n}\n\nif (options.throwOnLimitExceeded && currentArrayLength >= options.arrayLimit) {\n throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');\n}\n\nreturn val;\n```\n\n**Fixed code:**\n```js\nif (val && typeof val === 'string' && options.comma && val.indexOf(',') > -1) {\n const splitArray = val.split(',');\n if (splitArray.length > options.arrayLimit - currentArrayLength) { // Check against remaining limit\n if (options.throwOnLimitExceeded) {\n throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');\n } else {\n // Optionally convert to object or truncate, per README\n return splitArray.slice(0, options.arrayLimit - currentArrayLength);\n }\n }\n return splitArray;\n}\n\nif (options.throwOnLimitExceeded && currentArrayLength >= options.arrayLimit) {\n throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');\n}\n\nreturn val;\n```\nThis aligns behavior with indexed and bracket notations, reuses `currentArrayLength`, and respects `throwOnLimitExceeded`. Update README to note the consistent enforcement.", "title": "osvnpm - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/npm%2FGHSA-w7fw-mjwx-w883.json?alt=media" }, { "category": "description", "text": "### Summary\n\n`qs` `v6.15.3` allows bracket-key input to bypass `arrayLimit` and `throwOnLimitExceeded` when `comma: true`. The input `a[]=1,2,3,4` succeeds with `arrayLimit: 3`, while the equivalent plain-key input is rejected.\n\nAffected version tested:\n\n```text\nqs v6.15.3\ncommit 18d085e919dae70c8f1b200ab99323058edab2c2\n```\n\n### Details\n\n`parseArrayValue()` enforces the comma limit only for flat values. The `a[]` form is marked non-flat, so its comma-separated value is wrapped after parsing and the inner array is not checked. A single parameter can therefore materialize arbitrarily large arrays.\n\n### PoC\n\n```js\nconst qs = require('qs')\nconst options = { comma: true, arrayLimit: 3, throwOnLimitExceeded: true }\n\nconst result = qs.parse('a[]=1,2,3,4', options)\nconsole.log(result.a[0].length) // 4; expected RangeError\n\nconst big = qs.parse('a[]=' + '1,'.repeat(1000000) + '1', { comma: true, arrayLimit: 20 })\nconsole.log(big.a[0].length) // 1000001\n```\n\nOn `v6.15.3`, the first input parses successfully and the second creates an array with 1,000,001 elements. The equivalent `a=1,2,3,4` input throws `RangeError` as expected.\n\n### Impact\n\nAn attacker who can supply a query string or form body can bypass configured array limits and force excessive memory allocation, causing denial of service. The limit must be applied after comma splitting and before the resulting array is wrapped.", "title": "osvnpm - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/npm%2FGHSA-x5fp-wj9c-mxmx.json?alt=media" }, { "category": "description", "text": "### Summary\n\n\n\nWhen `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push key (`a[]=1,2,3,4`) is split into an array without being compared against `arrayLimit`, while the same value under a flat key (`a=1,2,3,4`), an indexed key (`a[0]=`), a nested key (`a[b]=`), or a dotted key (`a.b=` with `allowDots`) throws the documented `RangeError`. A single parameter such as `a[]=1,2,2,...` therefore produces an inner array of arbitrary length even though the caller opted into the hard limit. This is the `[]=` key form that the fix for CVE-2026-2391 (qs 6.14.2) did not cover.\n\n\n\n### Details\n\n\n\nIn `lib/parse.js`, a comma-separated value under a `[]=` key is split and then wrapped as a single nested element (`val = [val]`, so that each `a[]=x,y` group counts as one element of the outer array). The `arrayLimit` check that 6.14.2 added for comma values runs after that wrap, so for `[]=` parts it only ever saw the wrapper of length 1. 6.15.3 added a pre-split comma count so that an oversized value throws before it is allocated, but gated it on an `isFlatArrayValue` flag that `parseValues` set to `false` for any part containing `[]=`, and did not pass it for object-valued input, so the gap remained.\n\n\n\n#### PoC\n\n\n\n```js\n\n\n\nvar qs = require('qs');\n\n\n\nvar options = { comma: true, arrayLimit: 3, throwOnLimitExceeded: true };\n\n\n\nqs.parse('a=1,2,3,4', options); // RangeError: Array limit exceeded. Only 3 elements allowed in an array.\n\n\n\nqs.parse('a[]=1,2,3,4', options); // { a: [ [ '1', '2', '3', '4' ] ] } (no throw)\n\n\n\nqs.parse('a[]=' + '1,'.repeat(1000000) + '1', { comma: true, arrayLimit: 20, throwOnLimitExceeded: true });\n\n\n\n// no throw; a 1,000,001-element inner array is allocated\n\n\n\n```\n\n\n\n#### Fix\n\n\n\n`lib/parse.js`, applied in 8859c37 on `main` and released as v6.16.0: the `isFlatArrayValue` gate is removed, so every comma-split value is counted against `arrayLimit` before splitting regardless of key form. An in-limit group under `a[]=` still counts as one element of the outer array, and the default (`throwOnLimitExceeded: false`) path is unchanged.\n\n\n\n### Affected versions\n\n\n\n`>=6.14.2 <6.16.0`, fixed in v6.16.0.\n\n\n\nv6.14.2 introduced `arrayLimit` enforcement for comma values (the fix for CVE-2026-2391) but only for values not under a `[]=` key, and every release from v6.14.2 through v6.15.3 has the same gap. v6.14.0 and v6.14.1, where `throwOnLimitExceeded` exists but does not apply to any comma form, are covered by CVE-2026-2391 rather than this record. Earlier lines (6.7.x through 6.13.x) have `comma` but no `throwOnLimitExceeded`, so there is no hard cap on any comma path to bypass; releases before 6.7.0 have no `comma` option.\n\n\n\n### Impact\n\n\n\nAn unauthenticated attacker who can reach an application that parses untrusted query strings or urlencoded bodies with both `comma: true` and `throwOnLimitExceeded: true` (both non-default) can bypass the configured limit with a single `a[]=` parameter and force the parser to allocate an array proportional to the request size. The cost is strictly linear in the attacker-supplied bytes (about 0.1 microseconds and 6 to 7 retained bytes per input byte; the same out-of-memory threshold as the documented default `throwOnLimitExceeded: false` path), so a transport-layer request or body size limit bounds it completely (and node's default maximum HTTP header size of 16 KB already bounds the request line, so multi-megabyte payloads need a body parser). The impact is that an opt-in hard limit fails open on one key spelling, not unbounded allocation from a small input.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-82562" }, { "category": "description", "text": "### Summary When `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push key (`a[]=1,2,3,4`) is split into an array without being compared against `arrayLimit`, while the same value under a flat key (`a=1,2,3,4`), an indexed key (`a[0]=`), a nested key (`a[b]=`), or a dotted key (`a.b=` with `allowDots`) throws the documented `RangeError`. A single parameter such as `a[]=1,2,2,...` therefore produces an inner array of arbitrary length even though the caller opted into the hard limit. This is the `[]=` key form that the fix for CVE-2026-2391 (qs 6.14.2) did not cover. ### Details In `lib/parse.js`, a comma-separated value under a `[]=` key is split and then wrapped as a single nested element (`val = [val]`, so that each `a[]=x,y` group counts as one element of the outer array). The `arrayLimit` check that 6.14.2 added for comma values runs after that wrap, so for `[]=` parts it only ever saw the wrapper of length 1. 6.15.3 added a pre-split comma count so that an oversized value throws before it is allocated, but gated it on an `isFlatArrayValue` flag that `parseValues` set to `false` for any part containing `[]=`, and did not pass it for object-valued input, so the gap remained. #### PoC ```js var qs = require('qs'); var options = { comma: true, arrayLimit: 3, throwOnLimitExceeded: true }; qs.parse('a=1,2,3,4', options); // RangeError: Array limit exceeded. Only 3 elements allowed in an array. qs.parse('a[]=1,2,3,4', options); // { a: [ [ '1', '2', '3', '4' ] ] } (no throw) qs.parse('a[]=' + '1,'.repeat(1000000) + '1', { comma: true, arrayLimit: 20, throwOnLimitExceeded: true }); // no throw; a 1,000,001-element inner array is allocated ``` #### Fix `lib/parse.js`, applied in 8859c37 on `main` and released as v6.16.0: the `isFlatArrayValue` gate is removed, so every comma-split value is counted against `arrayLimit` before splitting regardless of key form. An in-limit group under `a[]=` still counts as one element of the outer array, and the default (`throwOnLimitExceeded: false`) path is unchanged. ### Affected versions `>=6.14.2 <6.16.0`, fixed in v6.16.0. v6.14.2 introduced `arrayLimit` enforcement for comma values (the fix for CVE-2026-2391) but only for values not under a `[]=` key, and every release from v6.14.2 through v6.15.3 has the same gap. v6.14.0 and v6.14.1, where `throwOnLimitExceeded` exists but does not apply to any comma form, are covered by CVE-2026-2391 rather than this record. Earlier lines (6.7.x through 6.13.x) have `comma` but no `throwOnLimitExceeded`, so there is no hard cap on any comma path to bypass; releases before 6.7.0 have no `comma` option. ### Impact An unauthenticated attacker who can reach an application that parses untrusted query strings or urlencoded bodies with both `comma: true` and `throwOnLimitExceeded: true` (both non-default) can bypass the configured limit with a single `a[]=` parameter and force the parser to allocate an array proportional to the request size. The cost is strictly linear in the attacker-supplied bytes (about 0.1 microseconds and 6 to 7 retained bytes per input byte; the same out-of-memory threshold as the documented default `throwOnLimitExceeded: false` path), so a transport-layer request or body size limit bounds it completely (and node's default maximum HTTP header size of 16 KB already bounds the request line, so multi-megabyte payloads need a body parser). The impact is that an opt-in hard limit fails open on one key spelling, not unbounded allocation from a small input.", "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-82562" }, { "category": "description", "text": "A flaw was found in qs. An unauthenticated attacker can exploit this by sending a specially crafted query string to an application using `qs.parse` with specific non-default settings (`comma: true` and `throwOnLimitExceeded: true`). This bypasses a configured array limit, causing the parser to allocate an excessively large array. This can lead to a Denial of Service (DoS) by consuming too much memory.", "title": "redhat - https://access.redhat.com/security/cve/CVE-2026-82562" }, { "category": "description", "text": "### Summary\n\n`qs` `v6.15.3` allows bracket-key input to bypass `arrayLimit` and `throwOnLimitExceeded` when `comma: true`. The input `a[]=1,2,3,4` succeeds with `arrayLimit: 3`, while the equivalent plain-key input is rejected.\n\nAffected version tested:\n\n```text\nqs v6.15.3\ncommit 18d085e919dae70c8f1b200ab99323058edab2c2\n```\n\n### Details\n\n`parseArrayValue()` enforces the comma limit only for flat values. The `a[]` form is marked non-flat, so its comma-separated value is wrapped after parsing and the inner array is not checked. A single parameter can therefore materialize arbitrarily large arrays.\n\n### PoC\n\n```js\nconst qs = require('qs')\nconst options = { comma: true, arrayLimit: 3, throwOnLimitExceeded: true }\n\nconst result = qs.parse('a[]=1,2,3,4', options)\nconsole.log(result.a[0].length) // 4; expected RangeError\n\nconst big = qs.parse('a[]=' + '1,'.repeat(1000000) + '1', { comma: true, arrayLimit: 20 })\nconsole.log(big.a[0].length) // 1000001\n```\n\nOn `v6.15.3`, the first input parses successfully and the second creates an array with 1,000,001 elements. The equivalent `a=1,2,3,4` input throws `RangeError` as expected.\n\n### Impact\n\nAn attacker who can supply a query string or form body can bypass configured array limits and force excessive memory allocation, causing denial of service. The limit must be applied after comma splitting and before the resulting array is wrapped.", "title": "github - https://github.com/advisories/GHSA-x5fp-wj9c-mxmx" }, { "category": "description", "text": "A flaw was found in qs. An unauthenticated attacker can exploit this by sending a specially crafted query string to an application using `qs.parse` with specific non-default settings (`comma: true` and `throwOnLimitExceeded: true`). This bypasses a configured array limit, causing the parser to allocate an excessively large array. This can lead to a Denial of Service (DoS) by consuming too much memory.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:63164" }, { "category": "description", "text": "### Summary\n\n\n\nWhen `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push key (`a[]=1,2,3,4`) is split into an array without being compared against `arrayLimit`, while the same value under a flat key (`a=1,2,3,4`), an indexed key (`a[0]=`), a nested key (`a[b]=`), or a dotted key (`a.b=` with `allowDots`) throws the documented `RangeError`. A single parameter such as `a[]=1,2,2,...` therefore produces an inner array of arbitrary length even though the caller opted into the hard limit. This is the `[]=` key form that the fix for CVE-2026-2391 (qs 6.14.2) did not cover.\n\n\n\n### Details\n\n\n\nIn `lib/parse.js`, a comma-separated value under a `[]=` key is split and then wrapped as a single nested element (`val = [val]`, so that each `a[]=x,y` group counts as one element of the outer array). The `arrayLimit` check that 6.14.2 added for comma values runs after that wrap, so for `[]=` parts it only ever saw the wrapper of length 1. 6.15.3 added a pre-split comma count so that an oversized value throws before it is allocated, but gated it on an `isFlatArrayValue` flag that `parseValues` set to `false` for any part containing `[]=`, and did not pass it for object-valued input, so the gap remained.\n\n\n\n#### PoC\n\n\n\n```js\n\n\n\nvar qs = require('qs');\n\n\n\nvar options = { comma: true, arrayLimit: 3, throwOnLimitExceeded: true };\n\n\n\nqs.parse('a=1,2,3,4', options); // RangeError: Array limit exceeded. Only 3 elements allowed in an array.\n\n\n\nqs.parse('a[]=1,2,3,4', options); // { a: [ [ '1', '2', '3', '4' ] ] } (no throw)\n\n\n\nqs.parse('a[]=' + '1,'.repeat(1000000) + '1', { comma: true, arrayLimit: 20, throwOnLimitExceeded: true });\n\n\n\n// no throw; a 1,000,001-element inner array is allocated\n\n\n\n```\n\n\n\n#### Fix\n\n\n\n`lib/parse.js`, applied in 8859c37 on `main` and released as v6.16.0: the `isFlatArrayValue` gate is removed, so every comma-split value is counted against `arrayLimit` before splitting regardless of key form. An in-limit group under `a[]=` still counts as one element of the outer array, and the default (`throwOnLimitExceeded: false`) path is unchanged.\n\n\n\n### Affected versions\n\n\n\n`>=6.14.2 <6.16.0`, fixed in v6.16.0.\n\n\n\nv6.14.2 introduced `arrayLimit` enforcement for comma values (the fix for CVE-2026-2391) but only for values not under a `[]=` key, and every release from v6.14.2 through v6.15.3 has the same gap. v6.14.0 and v6.14.1, where `throwOnLimitExceeded` exists but does not apply to any comma form, are covered by CVE-2026-2391 rather than this record. Earlier lines (6.7.x through 6.13.x) have `comma` but no `throwOnLimitExceeded`, so there is no hard cap on any comma path to bypass; releases before 6.7.0 have no `comma` option.\n\n\n\n### Impact\n\n\n\nAn unauthenticated attacker who can reach an application that parses untrusted query strings or urlencoded bodies with both `comma: true` and `throwOnLimitExceeded: true` (both non-default) can bypass the configured limit with a single `a[]=` parameter and force the parser to allocate an array proportional to the request size. The cost is strictly linear in the attacker-supplied bytes (about 0.1 microseconds and 6 to 7 retained bytes per input byte; the same out-of-memory threshold as the documented default `throwOnLimitExceeded: false` path), so a transport-layer request or body size limit bounds it completely (and node's default maximum HTTP header size of 16 KB already bounds the request line, so multi-megabyte payloads need a body parser). The impact is that an opt-in hard limit fails open on one key spelling, not unbounded allocation from a small input.", "title": "osvgit - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-82562.json?alt=media" }, { "category": "description", "text": "### Summary\n\n\n\nWhen `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push key (`a[]=1,2,3,4`) is split into an array without being compared against `arrayLimit`, while the same value under a flat key (`a=1,2,3,4`), an indexed key (`a[0]=`), a nested key (`a[b]=`), or a dotted key (`a.b=` with `allowDots`) throws the documented `RangeError`. A single parameter such as `a[]=1,2,2,...` therefore produces an inner array of arbitrary length even though the caller opted into the hard limit. This is the `[]=` key form that the fix for CVE-2026-2391 (qs 6.14.2) did not cover.\n\n\n\n### Details\n\n\n\nIn `lib/parse.js`, a comma-separated value under a `[]=` key is split and then wrapped as a single nested element (`val = [val]`, so that each `a[]=x,y` group counts as one element of the outer array). The `arrayLimit` check that 6.14.2 added for comma values runs after that wrap, so for `[]=` parts it only ever saw the wrapper of length 1. 6.15.3 added a pre-split comma count so that an oversized value throws before it is allocated, but gated it on an `isFlatArrayValue` flag that `parseValues` set to `false` for any part containing `[]=`, and did not pass it for object-valued input, so the gap remained.\n\n\n\n#### PoC\n\n\n\n```js\n\n\n\nvar qs = require('qs');\n\n\n\nvar options = { comma: true, arrayLimit: 3, throwOnLimitExceeded: true };\n\n\n\nqs.parse('a=1,2,3,4', options); // RangeError: Array limit exceeded. Only 3 elements allowed in an array.\n\n\n\nqs.parse('a[]=1,2,3,4', options); // { a: [ [ '1', '2', '3', '4' ] ] } (no throw)\n\n\n\nqs.parse('a[]=' + '1,'.repeat(1000000) + '1', { comma: true, arrayLimit: 20, throwOnLimitExceeded: true });\n\n\n\n// no throw; a 1,000,001-element inner array is allocated\n\n\n\n```\n\n\n\n#### Fix\n\n\n\n`lib/parse.js`, applied in 8859c37 on `main` and released as v6.16.0: the `isFlatArrayValue` gate is removed, so every comma-split value is counted against `arrayLimit` before splitting regardless of key form. An in-limit group under `a[]=` still counts as one element of the outer array, and the default (`throwOnLimitExceeded: false`) path is unchanged.\n\n\n\n### Affected versions\n\n\n\n`>=6.14.2 <6.16.0`, fixed in v6.16.0.\n\n\n\nv6.14.2 introduced `arrayLimit` enforcement for comma values (the fix for CVE-2026-2391) but only for values not under a `[]=` key, and every release from v6.14.2 through v6.15.3 has the same gap. v6.14.0 and v6.14.1, where `throwOnLimitExceeded` exists but does not apply to any comma form, are covered by CVE-2026-2391 rather than this record. Earlier lines (6.7.x through 6.13.x) have `comma` but no `throwOnLimitExceeded`, so there is no hard cap on any comma path to bypass; releases before 6.7.0 have no `comma` option.\n\n\n\n### Impact\n\n\n\nAn unauthenticated attacker who can reach an application that parses untrusted query strings or urlencoded bodies with both `comma: true` and `throwOnLimitExceeded: true` (both non-default) can bypass the configured limit with a single `a[]=` parameter and force the parser to allocate an array proportional to the request size. The cost is strictly linear in the attacker-supplied bytes (about 0.1 microseconds and 6 to 7 retained bytes per input byte; the same out-of-memory threshold as the documented default `throwOnLimitExceeded: false` path), so a transport-layer request or body size limit bounds it completely (and node's default maximum HTTP header size of 16 KB already bounds the request line, so multi-megabyte payloads need a body parser). The impact is that an opt-in hard limit fails open on one key spelling, not unbounded allocation from a small input.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-82562" }, { "category": "other", "text": "0.0054", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" }, { "category": "other", "text": "6.3", "title": "CVSSV4 base score" }, { "category": "other", "text": "4.4", "title": "NCSC Score" }, { "category": "other", "text": "There is product data available from source Certbundde, VENDOR FIX as product remediation category, Is related to (a version of) an uncommon product", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "The value of the most recent CVSS (V3) score, Is related to a product by vendor Ibm, There is product_remediation data available from source Redhat", "title": "NCSC Score top decreasing factors" }, { "category": "details", "text": "Severity: 1\n", "title": "Vendor assessment" } ], "product_status": { "fixed": [ "CSAFPID-9125369" ], "known_affected": [ "CSAFPID-5313996", "CSAFPID-1439279", "CSAFPID-1439281", "CSAFPID-1439282", "CSAFPID-1439286", "CSAFPID-1439292", "CSAFPID-1439294", "CSAFPID-1439300", "CSAFPID-1439310", "CSAFPID-1439313", "CSAFPID-1439315", "CSAFPID-1439317", "CSAFPID-1439319", "CSAFPID-1439328", "CSAFPID-1439334", "CSAFPID-1441056", "CSAFPID-1441076", "CSAFPID-1441080", "CSAFPID-1441083", "CSAFPID-1441085", "CSAFPID-1441094", "CSAFPID-1441120", "CSAFPID-1441147", "CSAFPID-1441150", "CSAFPID-1441193", "CSAFPID-1441200", "CSAFPID-1441204", "CSAFPID-1455870", "CSAFPID-1455873", "CSAFPID-1455906", "CSAFPID-1459359", "CSAFPID-1496215", "CSAFPID-1496261", "CSAFPID-1508257", "CSAFPID-1508261", "CSAFPID-1508264", "CSAFPID-1508265", "CSAFPID-1508266", "CSAFPID-1663145", "CSAFPID-1780157", "CSAFPID-1832822", "CSAFPID-1837472", "CSAFPID-1837473", "CSAFPID-1851477", "CSAFPID-1919971", "CSAFPID-1919990", "CSAFPID-1919996", "CSAFPID-2109918", "CSAFPID-2109952", "CSAFPID-2109953", "CSAFPID-2159493", "CSAFPID-2467434", "CSAFPID-2467437", "CSAFPID-2467450", "CSAFPID-2467451", "CSAFPID-2485158", "CSAFPID-2485161", "CSAFPID-2485163", "CSAFPID-2524222", "CSAFPID-2552001", "CSAFPID-2577689", "CSAFPID-2631284", "CSAFPID-2652731", "CSAFPID-2652741", "CSAFPID-2778177", "CSAFPID-2847200", "CSAFPID-2847201", "CSAFPID-2847215", "CSAFPID-2847216", "CSAFPID-2847218", "CSAFPID-2847219", "CSAFPID-2858634", "CSAFPID-2868420", "CSAFPID-2878788", "CSAFPID-2895507", "CSAFPID-2914692", "CSAFPID-2914693", "CSAFPID-2914823", "CSAFPID-2914839", "CSAFPID-2933419", "CSAFPID-2942229", "CSAFPID-2942231", "CSAFPID-2976378", "CSAFPID-2985382", "CSAFPID-2985384", "CSAFPID-2985387", "CSAFPID-2985390", "CSAFPID-3036143", "CSAFPID-3036144", "CSAFPID-3036166", "CSAFPID-3049534", "CSAFPID-3086230", "CSAFPID-3112100", "CSAFPID-3120253", "CSAFPID-4534155", "CSAFPID-4994901", "CSAFPID-5009266", "CSAFPID-5068114", "CSAFPID-5157272", "CSAFPID-5157328", "CSAFPID-5182138", "CSAFPID-5198604", "CSAFPID-5198605", "CSAFPID-5205180", "CSAFPID-5205182", "CSAFPID-5222660", "CSAFPID-5222661", "CSAFPID-5222662", "CSAFPID-5222698", "CSAFPID-5222713", "CSAFPID-5222758", "CSAFPID-5222902", "CSAFPID-5222926", "CSAFPID-5222927", "CSAFPID-5222928", "CSAFPID-5222929", "CSAFPID-5222930", "CSAFPID-5222931", "CSAFPID-5222933", "CSAFPID-5222934", "CSAFPID-5222935", "CSAFPID-5222941", "CSAFPID-5355695", "CSAFPID-5360342", "CSAFPID-5386578", "CSAFPID-5438677", "CSAFPID-5438679", "CSAFPID-5449645", "CSAFPID-5449646", "CSAFPID-5449647", "CSAFPID-5454788", "CSAFPID-5486263", "CSAFPID-5486265", "CSAFPID-5811351", "CSAFPID-5811359", "CSAFPID-5901550", "CSAFPID-5940623", "CSAFPID-6014972", "CSAFPID-6239270", "CSAFPID-6239273", "CSAFPID-6239276", "CSAFPID-7220367", "CSAFPID-7666647", "CSAFPID-7666648", "CSAFPID-7666649", "CSAFPID-7666650", "CSAFPID-7987391", "CSAFPID-8334394", "CSAFPID-8490091", "CSAFPID-8490126", "CSAFPID-8505503", "CSAFPID-8513518", "CSAFPID-8519306", "CSAFPID-8902830", "CSAFPID-8902831", "CSAFPID-8902834", "CSAFPID-8902835", "CSAFPID-8902836", "CSAFPID-8902837", "CSAFPID-8927911", "CSAFPID-8927912", "CSAFPID-8927913", "CSAFPID-8927914", "CSAFPID-8927915", "CSAFPID-8927916", "CSAFPID-8927917", "CSAFPID-8930216", "CSAFPID-8930217", "CSAFPID-8930218", "CSAFPID-8935769", "CSAFPID-8935770", "CSAFPID-8935771", "CSAFPID-8939163", "CSAFPID-8939164", "CSAFPID-8939165", "CSAFPID-8939166", "CSAFPID-8939167", "CSAFPID-8991281", "CSAFPID-8991282", "CSAFPID-8991287", "CSAFPID-9053231", "CSAFPID-9104702", "CSAFPID-9105550", "CSAFPID-9105553", "CSAFPID-9105554", "CSAFPID-9105555", "CSAFPID-9108360", "CSAFPID-9108361", "CSAFPID-9108372", "CSAFPID-9096391", "CSAFPID-9477920", "CSAFPID-9477921", "CSAFPID-9485661", "CSAFPID-9485662", "CSAFPID-9485663", "CSAFPID-1337768", "CSAFPID-8720843", "CSAFPID-8720842", "CSAFPID-8720841", "CSAFPID-9099196", "CSAFPID-9100561", "CSAFPID-1317177", "CSAFPID-5627272", "CSAFPID-9111863", "CSAFPID-5211181" ], "known_not_affected": [ "CSAFPID-6027434", "CSAFPID-6039395", "CSAFPID-6239277", "CSAFPID-8476917", "CSAFPID-8476920", "CSAFPID-8505504", "CSAFPID-8902832" ] }, "references": [ { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-82562.json?alt=media" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82562" }, { "category": "external", "summary": "Source - debian", "url": "https://security-tracker.debian.org/tracker/CVE-2026-82562" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-82562" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-82562" }, { "category": "external", "summary": "Source - github", "url": "https://github.com/advisories/GHSA-x5fp-wj9c-mxmx" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:63164" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82562" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3596.json" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/npm%2FGHSA-w7fw-mjwx-w883.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/npm%2FGHSA-x5fp-wj9c-mxmx.json?alt=media" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0431" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/ljharb/qs/commit/8859c37470e11b42b547b275e4e9bd0bc8cc5464" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/ljharb/qs/security/advisories/GHSA-w7fw-mjwx-w883" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; redhat", "url": "https://github.com/ljharb/qs/security/advisories/GHSA-x5fp-wj9c-mxmx" }, { "category": "external", "summary": "Reference - github; osv; redhat", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82562" }, { "category": "external", "summary": "Reference - redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-82562" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/advisories/GHSA-x5fp-wj9c-mxmx" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:63164" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-82417" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-82562" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/updates/classification/" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525939" }, { "category": "external", "summary": "Reference - redhat", "url": "https://images.redhat.com/" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63164.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "http://linux.oracle.com/errata/ELSA-2026-74085.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3596.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3596" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289740" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7290698" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7292706" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3623" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289775" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289776" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289778" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289779" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289780" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289783" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289785" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289787" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289788" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289789" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289790" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289791" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289792" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289794" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289795" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289796" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289797" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289798" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7289800" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82562.json" }, { "category": "external", "summary": "Reference - osv", "url": "https://npmjs.com/qs" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/ljharb/qs/commit/f6a7abff1f13d644db9b05fe4f2c98ada6bf8482" }, { "category": "external", "summary": "Reference - osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2391" } ], "remediations": [ { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/", "product_ids": [ "CSAFPID-6154979", "CSAFPID-9125369" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:63164" }, { "category": "workaround", "details": "Until an updated qs dependency is available in your Red Hat product, limit exposure as follows:\n\n1. If your application calls qs.parse() directly, avoid enabling both comma:true and throwOnLimitExceeded:true when parsing untrusted query strings or urlencoded request bodies. Disable one of these non-default options, or upgrade qs to version 6.16.0 or later.\n\n2. Where qs is included only as a transitive dependency, apply product updates that ship qs 6.16.0 or later when they become available.\n\n3. Enforce HTTP request-line and request-body size limits at your ingress or application server. Because allocated memory scales with attacker-supplied input size, transport-layer limits bound worst-case impact.\n\nHost operating systems are not directly affected. These steps apply to application processes that use qs with the vulnerable configuration.", "product_ids": [ "CSAFPID-6154979", "CSAFPID-9125369" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.7, "baseSeverity": "LOW" }, "products": [ "CSAFPID-1317177", "CSAFPID-1337768", "CSAFPID-1439279", "CSAFPID-1439281", "CSAFPID-1439282", "CSAFPID-1439286", "CSAFPID-1439292", "CSAFPID-1439294", "CSAFPID-1439300", "CSAFPID-1439310", "CSAFPID-1439313", "CSAFPID-1439315", "CSAFPID-1439317", "CSAFPID-1439319", "CSAFPID-1439328", "CSAFPID-1439334", "CSAFPID-1441056", "CSAFPID-1441076", "CSAFPID-1441080", "CSAFPID-1441083", "CSAFPID-1441085", "CSAFPID-1441094", "CSAFPID-1441120", "CSAFPID-1441147", "CSAFPID-1441150", "CSAFPID-1441193", "CSAFPID-1441200", "CSAFPID-1441204", "CSAFPID-1455870", "CSAFPID-1455873", "CSAFPID-1455906", "CSAFPID-1459359", "CSAFPID-1496215", "CSAFPID-1496261", "CSAFPID-1508257", "CSAFPID-1508261", "CSAFPID-1508264", "CSAFPID-1508265", "CSAFPID-1508266", "CSAFPID-1663145", "CSAFPID-1780157", "CSAFPID-1832822", "CSAFPID-1837472", "CSAFPID-1837473", "CSAFPID-1851477", "CSAFPID-1919971", "CSAFPID-1919990", "CSAFPID-1919996", "CSAFPID-2109918", "CSAFPID-2109952", "CSAFPID-2109953", "CSAFPID-2159493", "CSAFPID-2467434", "CSAFPID-2467437", "CSAFPID-2467450", "CSAFPID-2467451", "CSAFPID-2485158", "CSAFPID-2485161", "CSAFPID-2485163", "CSAFPID-2524222", "CSAFPID-2552001", "CSAFPID-2577689", "CSAFPID-2631284", "CSAFPID-2652731", "CSAFPID-2652741", "CSAFPID-2778177", "CSAFPID-2847200", "CSAFPID-2847201", "CSAFPID-2847215", "CSAFPID-2847216", "CSAFPID-2847218", "CSAFPID-2847219", "CSAFPID-2858634", "CSAFPID-2868420", "CSAFPID-2878788", "CSAFPID-2895507", "CSAFPID-2914692", "CSAFPID-2914693", "CSAFPID-2914823", "CSAFPID-2914839", "CSAFPID-2933419", "CSAFPID-2942229", "CSAFPID-2942231", "CSAFPID-2976378", "CSAFPID-2985382", "CSAFPID-2985384", "CSAFPID-2985387", "CSAFPID-2985390", "CSAFPID-3036143", "CSAFPID-3036144", "CSAFPID-3036166", "CSAFPID-3049534", "CSAFPID-3086230", "CSAFPID-3112100", "CSAFPID-3120253", "CSAFPID-4534155", "CSAFPID-4994901", "CSAFPID-5009266", "CSAFPID-5068114", "CSAFPID-5157272", "CSAFPID-5157328", "CSAFPID-5182138", "CSAFPID-5198604", "CSAFPID-5198605", "CSAFPID-5205180", "CSAFPID-5205182", "CSAFPID-5211181", "CSAFPID-5222660", "CSAFPID-5222661", "CSAFPID-5222662", "CSAFPID-5222698", "CSAFPID-5222713", "CSAFPID-5222758", "CSAFPID-5222902", "CSAFPID-5222926", "CSAFPID-5222927", "CSAFPID-5222928", "CSAFPID-5222929", "CSAFPID-5222930", "CSAFPID-5222931", "CSAFPID-5222933", "CSAFPID-5222934", "CSAFPID-5222935", "CSAFPID-5222941", "CSAFPID-5313996", "CSAFPID-5355695", "CSAFPID-5360342", "CSAFPID-5386578", "CSAFPID-5438677", "CSAFPID-5438679", "CSAFPID-5449645", "CSAFPID-5449646", "CSAFPID-5449647", "CSAFPID-5454788", "CSAFPID-5486263", "CSAFPID-5486265", "CSAFPID-5627272", "CSAFPID-5811351", "CSAFPID-5811359", "CSAFPID-5901550", "CSAFPID-5940623", "CSAFPID-6014972", "CSAFPID-6239270", "CSAFPID-6239273", "CSAFPID-6239276", "CSAFPID-7220367", "CSAFPID-7666647", "CSAFPID-7666648", "CSAFPID-7666649", "CSAFPID-7666650", "CSAFPID-7987391", "CSAFPID-8334394", "CSAFPID-8490091", "CSAFPID-8490126", "CSAFPID-8505503", "CSAFPID-8513518", "CSAFPID-8519306", "CSAFPID-8720841", "CSAFPID-8720842", "CSAFPID-8720843", "CSAFPID-8902830", "CSAFPID-8902831", "CSAFPID-8902834", "CSAFPID-8902835", "CSAFPID-8902836", "CSAFPID-8902837", "CSAFPID-8927911", "CSAFPID-8927912", "CSAFPID-8927913", "CSAFPID-8927914", "CSAFPID-8927915", "CSAFPID-8927916", "CSAFPID-8927917", "CSAFPID-8930216", "CSAFPID-8930217", "CSAFPID-8930218", "CSAFPID-8935769", "CSAFPID-8935770", "CSAFPID-8935771", "CSAFPID-8939163", "CSAFPID-8939164", "CSAFPID-8939165", "CSAFPID-8939166", "CSAFPID-8939167", "CSAFPID-8991281", "CSAFPID-8991282", "CSAFPID-8991287", "CSAFPID-9053231", "CSAFPID-9096391", "CSAFPID-9099196", "CSAFPID-9100561", "CSAFPID-9104702", "CSAFPID-9105550", "CSAFPID-9105553", "CSAFPID-9105554", "CSAFPID-9105555", "CSAFPID-9108360", "CSAFPID-9108361", "CSAFPID-9108372", "CSAFPID-9111863", "CSAFPID-9477920", "CSAFPID-9477921", "CSAFPID-9485661", "CSAFPID-9485662", "CSAFPID-9485663" ] } ], "title": "CVE-2026-82562" } ] }