CVE-2026-6321

fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and parent-directory references, so distinct URIs could collapse onto the same normalized path. Applications that normalize or compare attacker-controlled URLs to enforce path-based policy can be bypassed, with a path that appears confined under an allowed prefix normalizing to a different location. Versions <= 3.1.0 are affected. Update to 3.1.1 or later.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://cna.openjsf.org/security-advisories.html	Vendor Advisory
https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6	Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19238
https://access.redhat.com/errata/RHSA-2026:20338
https://access.redhat.com/errata/RHSA-2026:21338
https://access.redhat.com/errata/RHSA-2026:24473
https://access.redhat.com/errata/RHSA-2026:24766
https://access.redhat.com/errata/RHSA-2026:24866
https://access.redhat.com/errata/RHSA-2026:24977
https://access.redhat.com/errata/RHSA-2026:25089
https://access.redhat.com/errata/RHSA-2026:25123
https://access.redhat.com/errata/RHSA-2026:26214
https://access.redhat.com/errata/RHSA-2026:26234
https://access.redhat.com/errata/RHSA-2026:26416
https://access.redhat.com/errata/RHSA-2026:26420
https://access.redhat.com/errata/RHSA-2026:34342
https://access.redhat.com/errata/RHSA-2026:37385
https://access.redhat.com/errata/RHSA-2026:42078
https://access.redhat.com/errata/RHSA-2026:42079
https://access.redhat.com/errata/RHSA-2026:56366
https://access.redhat.com/errata/RHSA-2026:56431
https://access.redhat.com/errata/RHSA-2026:56928
https://access.redhat.com/errata/RHSA-2026:57013
https://access.redhat.com/security/cve/CVE-2026-6321
https://bugzilla.redhat.com/show_bug.cgi?id=2466582
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6321.json

Configurations

Configuration 1 (hide)

cpe:2.3:a:openjsf:fast-uri:*:*:*:*:*:node.js:*:*

History

No history.

Information

Published : 2026-05-04 20:16

Updated : 2026-09-10 13:20

NVD link : CVE-2026-6321

Mitre link : CVE-2026-6321

CVE.ORG link : CVE-2026-6321

JSON object : View

Products Affected

openjsf

fast-uri

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2026-6321", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-6321", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-05T12:44:27.336265Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "ce714d77-add3-4f53-aff5-83d477b104bb", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "ce714d77-add3-4f53-aff5-83d477b104bb", "affectedData": [{"vendor": "fast-uri", "product": "fast-uri", "versions": [{"status": "affected", "version": "0", "lessThan": "3.1.1", "versionType": "semver"}, {"status": "unaffected", "version": "3.1.1", "versionType": "semver"}], "packageURL": "pkg:npm/fast-uri", "defaultStatus": "unaffected"}]}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "affectedData": [{"cpes": ["cpe:/a:redhat:apache_camel_hawtio:4.4::el9"], "vendor": "Red Hat", "product": "HawtIO HawtIO 4.4.0", "packageName": "io.hawt-project", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2.5::el8"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8", "versions": [{"status": "unaffected", "version": "0:2.5.20260715-1.el8ap", "lessThan": "*", "versionType": "rpm"}], "packageName": "automation-gateway", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2.5::el9"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9", "versions": [{"status": "unaffected", "version": "0:2.5.20260715-1.el9ap", "lessThan": "*", "versionType": "rpm"}], "packageName": "automation-gateway", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2.6::el9"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9", "versions": [{"status": "unaffected", "version": "0:2.6.11-1.el9ap", "lessThan": "*", "versionType": "rpm"}], "packageName": "automation-platform-ui", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "versions": [{"status": "unaffected", "version": "0:1.1.1-1.el10_2", "lessThan": "*", "versionType": "rpm"}], "packageName": "rh-podman-desktop", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "vendor": "Red Hat", "product": "Cluster Observability Operator 1.5.0", "versions": [{"status": "unaffected", "version": "1782840519", "lessThan": "*", "versionType": "rpm"}], "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "vendor": "Red Hat", "product": "Cluster Observability Operator 1.5.0", "versions": [{"status": "unaffected", "version": "1782839981", "lessThan": "*", "versionType": "rpm"}], "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "vendor": "Red Hat", "product": "Cluster Observability Operator 1.5.0", "versions": [{"status": "unaffected", "version": "1782839193", "lessThan": "*", "versionType": "rpm"}], "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "vendor": "Red Hat", "product": "Cluster Observability Operator 1.5.0", "versions": [{"status": "unaffected", "version": "1782838753", "lessThan": "*", "versionType": "rpm"}], "packageName": "cluster-observability-operator/distributed-tracing-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "vendor": "Red Hat", "product": "Cluster Observability Operator 1.5.0", "versions": [{"status": "unaffected", "version": "1782839279", "lessThan": "*", "versionType": "rpm"}], "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "vendor": "Red Hat", "product": "Cluster Observability Operator 1.5.0", "versions": [{"status": "unaffected", "version": "1782840539", "lessThan": "*", "versionType": "rpm"}], "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "vendor": "Red Hat", "product": "Cluster Observability Operator 1.5.0", "versions": [{"status": "unaffected", "version": "1782841925", "lessThan": "*", "versionType": "rpm"}], "packageName": "cluster-observability-operator/logging-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "vendor": "Red Hat", "product": "Cluster Observability Operator 1.5.0", "versions": [{"status": "unaffected", "version": "1782838476", "lessThan": "*", "versionType": "rpm"}], "packageName": "cluster-observability-operator/monitoring-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "vendor": "Red Hat", "product": "Cluster Observability Operator 1.5.0", "versions": [{"status": "unaffected", "version": "1782839996", "lessThan": "*", "versionType": "rpm"}], "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "vendor": "Red Hat", "product": "Cluster Observability Operator 1.5.0", "versions": [{"status": "unaffected", "version": "1782839494", "lessThan": "*", "versionType": "rpm"}], "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:network_observ_optr:1.12::el9"], "vendor": "Red Hat", "product": "Network Observability (NETOBSERV) 1.12.2", "versions": [{"status": "unaffected", "version": "1780556069", "lessThan": "*", "versionType": "rpm"}], "packageName": "network-observability/network-observability-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2.5::el8"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2.5", "versions": [{"status": "unaffected", "version": "1780082949", "lessThan": "*", "versionType": "rpm"}], "packageName": "ansible-automation-platform-25/lightspeed-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2.6::el9"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2.6", "versions": [{"status": "unaffected", "version": "1779784904", "lessThan": "*", "versionType": "rpm"}], "packageName": "ansible-automation-platform-26/lightspeed-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2.6::el9"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2.6", "versions": [{"status": "unaffected", "version": "1779783248", "lessThan": "*", "versionType": "rpm"}], "packageName": "ansible-automation-platform-tech-preview/mcp-server-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhdh:1.8::el9"], "vendor": "Red Hat", "product": "Red Hat Developer Hub 1.8", "versions": [{"status": "unaffected", "version": "1779841586", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhdh/rhdh-hub-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhdh:1.9::el9"], "vendor": "Red Hat", "product": "Red Hat Developer Hub 1.9", "versions": [{"status": "unaffected", "version": "1781187342", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhdh/rhdh-hub-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:discovery:2::el9"], "vendor": "Red Hat", "product": "Red Hat Discovery 2", "versions": [{"status": "unaffected", "version": "1779395188", "lessThan": "*", "versionType": "rpm"}], "packageName": "discovery/discovery-ui-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI 2.25", "versions": [{"status": "unaffected", "version": "1780467029", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhoai/odh-dashboard-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI 2.25", "versions": [{"status": "unaffected", "version": "1780467147", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhoai/odh-mod-arch-model-registry-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1781183284", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/cephcsi-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1781183499", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-core-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1780663368", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1781184121", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1780663596", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1781183713", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-metrics-exporter-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1780663548", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1781183811", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cli-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1781184611", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1780663638", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cosi-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1780663861", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1780663920", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1781184484", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1780663886", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1781184239", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-must-gather-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1780664089", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1780664140", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odr-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.16", "versions": [{"status": "unaffected", "version": "1781184468", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/rook-ceph-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781555717", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786705347", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/cephcsi-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781554936", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786706101", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/cephcsi-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781555645", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786705558", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-core-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781556009", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786705646", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781558423", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786706138", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781555708", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786705741", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781557202", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786705777", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-metrics-exporter-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781555679", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786705802", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781557189", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786705938", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cli-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781556534", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786706577", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781556085", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786706125", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cosi-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781555971", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786706177", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781557158", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786706188", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781556690", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786706679", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781558326", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786706357", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781556544", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786706612", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-must-gather-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781556958", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786706644", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781556901", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786706659", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odr-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1781557496", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786706880", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/rook-ceph-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778576707", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786701839", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/cephcsi-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778576350", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786701555", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/cephcsi-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778769574", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786702052", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-core-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778576929", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786702559", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778770148", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786702713", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778576957", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786702264", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1779093256", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786702448", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-metrics-exporter-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778577150", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786702276", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778577175", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786702440", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cli-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778577083", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786702315", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cloudnative-pg-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778770362", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786703071", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778577169", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786702563", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cosi-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778577201", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786702636", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778577489", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786702623", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778770439", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786703137", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778577548", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786702716", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778770127", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786702872", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-must-gather-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778577523", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786702949", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778577519", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786702917", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odr-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1778577696", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1786703143", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/rook-ceph-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786627460", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/cephcsi-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786626399", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/cephcsi-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786628235", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-core-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786627106", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786629761", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786627559", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786687918", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-metrics-exporter-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786629478", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786628142", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cli-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786631508", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cloudnative-pg-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786628053", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786627382", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cosi-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786627430", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786629076", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786627469", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-external-snapshotter-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786644072", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786688215", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786628340", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786628623", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-must-gather-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786632256", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786628935", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odr-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1786629548", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/rook-ceph-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787057250", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/cephcsi-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787057964", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/cephcsi-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787057603", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/devicefinder-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787058450", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-core-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787057989", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787059853", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787057849", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787060257", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-metrics-exporter-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787058278", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787058658", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-blackbox-exporter-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787058706", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cli-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787058403", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cloudnative-pg-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787059072", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787058807", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cosi-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787058588", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787058970", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787059538", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-drbd-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787059616", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-external-snapshotter-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787061098", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787059085", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-lightspeed-rag-content-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787059621", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787059386", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787060080", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-must-gather-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787060105", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787059493", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odr-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787060201", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odr-volsync-plugin-mover-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787060274", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odr-volsync-plugin-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.22::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.22", "versions": [{"status": "unaffected", "version": "1787061554", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/rook-ceph-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_devspaces:3.28::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Dev Spaces 3.28", "versions": [{"status": "unaffected", "version": "1780685176", "lessThan": "*", "versionType": "rpm"}], "packageName": "devspaces/dashboard-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:satellite:6.18::el9"], "vendor": "Red Hat", "product": "Red Hat Satellite 6.18", "versions": [{"status": "unaffected", "version": "1781181673", "lessThan": "*", "versionType": "rpm"}], "packageName": "satellite/iop-advisor-frontend-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:confidential_compute_attestation:1"], "vendor": "Red Hat", "product": "Confidential Compute Attestation", "packageName": "openshift-sandboxed-containers/osc-pccs", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cryostat:4"], "vendor": "Red Hat", "product": "Cryostat 4", "packageName": "cryostat-openshift-console-plugin-npm", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_pipelines:1"], "vendor": "Red Hat", "product": "OpenShift Pipelines", "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_pipelines:1"], "vendor": "Red Hat", "product": "OpenShift Pipelines", "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2", "packageName": "ansible-automation-platform-26/gateway-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2", "packageName": "ansible-automation-platform/automation-dashboard-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:podman_desktop:1"], "vendor": "Red Hat", "product": "Red Hat Build of Podman Desktop", "packageName": "podman-desktop-macos-1-0", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:podman_desktop:1"], "vendor": "Red Hat", "product": "Red Hat Build of Podman Desktop", "packageName": "podman-desktop-windows-1-0", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:podman_desktop:0"], "vendor": "Red Hat", "product": "Red Hat Build of Podman Desktop - Tech Preview", "packageName": "rhdesktop/rh-podman-desktop-ext-bootc-rhel10", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:jboss_data_grid:8"], "vendor": "Red Hat", "product": "Red Hat Data Grid 8", "packageName": "org.infinispan-infinispan-console", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhdh:1"], "vendor": "Red Hat", "product": "Red Hat Developer Hub", "packageName": "rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "linux-sgx", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "linux-sgx", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-dashboard-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-mlflow-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-mod-arch-maas-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift4/ose-monitoring-plugin-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:satellite:6"], "vendor": "Red Hat", "product": "Red Hat Satellite 6", "packageName": "nodejs-compression-webpack-plugin", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:satellite:6"], "vendor": "Red Hat", "product": "Red Hat Satellite 6", "packageName": "nodejs-mini-css-extract-plugin", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:satellite:6"], "vendor": "Red Hat", "product": "Red Hat Satellite 6", "packageName": "nodejs-webpack", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:amq_streams:2"], "vendor": "Red Hat", "product": "streams for Apache Kafka 2", "packageName": "com.github.streamshub-console", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:amq_streams:3"], "vendor": "Red Hat", "product": "streams for Apache Kafka 3", "packageName": "com.github.streamshub-console", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}]}], "published": "2026-05-04T20:16:20.950", "references": [{"url": "https://cna.openjsf.org/security-advisories.html", "tags": ["Vendor Advisory"], "source": "ce714d77-add3-4f53-aff5-83d477b104bb"}, {"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6", "tags": ["Vendor Advisory"], "source": "ce714d77-add3-4f53-aff5-83d477b104bb"}, {"url": "https://access.redhat.com/errata/RHSA-2026:19238", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:20338", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:21338", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:24473", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:24766", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:24866", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:24977", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:25089", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:25123", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:26214", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:26234", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:26416", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:26420", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:34342", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:37385", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:42078", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:42079", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:56366", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:56431", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:56928", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/errata/RHSA-2026:57013", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/security/cve/CVE-2026-6321", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466582", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6321.json", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "ce714d77-add3-4f53-aff5-83d477b104bb", "description": [{"lang": "en", "value": "CWE-22"}]}, {"type": "Secondary", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and parent-directory references, so distinct URIs could collapse onto the same normalized path. Applications that normalize or compare attacker-controlled URLs to enforce path-based policy can be bypassed, with a path that appears confined under an allowed prefix normalizing to a different location. Versions <= 3.1.0 are affected. Update to 3.1.1 or later."}], "lastModified": "2026-09-10T13:20:28.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openjsf:fast-uri:*:*:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "7F2ECF8E-70DB-4CD4-95E1-7DC2A622A8B8", "versionEndExcluding": "3.1.1"}], "operator": "OR"}]}], "sourceIdentifier": "ce714d77-add3-4f53-aff5-83d477b104bb"}