{ "$schema": "https://docs.oasis-open.org/csaf/csaf/v2.1/schema/csaf.json", "document": { "category": "csaf_security_advisory", "csaf_version": "2.1", "distribution": { "tlp": { "label": "RED" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Generated from an analysis of SBOM wto-1.12.json (spdx-json, sha256 8e2ab88522e746652beea782f8ee9f1d50ca1a6dd2111e40475a185358b9e757)." }, { "category": "general", "text": "This advisory is based on an INCOMPLETE analysis. The following analyzers did not produce results, so components they would have covered may carry vulnerabilities not listed here: shieldbom (fail).", "title": "Analysis coverage" } ], "publisher": { "category": "vendor", "contact_details": "security@ndaal.eu", "name": "ndaal Gesellschaft fuer Sicherheit in der Informationstechnik mbH & Co KG", "namespace": "https://ndaal.eu/csaf" }, "references": [ { "category": "self", "summary": "This advisory", "url": "https://ndaal.eu/csaf/ndaal-sba-2912" } ], "title": "Vulnerabilities found in SBOM wto-1.12.json", "tracking": { "current_release_date": "2026-09-20T20:01:53Z", "generator": { "engine": { "name": "ndaal SBOM Auditor", "version": "1.6.26" } }, "id": "ndaal-sba-2912", "initial_release_date": "2026-09-20T20:01:53Z", "revision_history": [ { "date": "2026-09-20T20:01:53Z", "number": "1.0.0", "summary": "Initial advisory generated from an SBOM analysis." } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "full_product_names": [ { "name": "aws-sdk-go@v1.53.12", "product_id": "CSAFPID-0236" }, { "name": "aws-sdk-go@v1.55.6", "product_id": "CSAFPID-0237" }, { "name": "buildkit@v0.12.5", "product_id": "CSAFPID-0180" }, { "name": "buildkit@v0.16.0", "product_id": "CSAFPID-0181" }, { "name": "bzip2-libs@1.0.8-11.el9", "product_id": "CSAFPID-0108", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/bzip2-libs@1.0.8-11.el9?arch=x86_64&distro=rhel-9.8&upstream=bzip2-1.0.8-11.el9.src.rpm" ] } }, { "name": "cel-go@v0.23.2", "product_id": "CSAFPID-0217" }, { "name": "chi@v4.1.2+incompatible", "product_id": "CSAFPID-0239" }, { "name": "circl@v1.3.7", "product_id": "CSAFPID-0172" }, { "name": "circl@v1.6.1", "product_id": "CSAFPID-0230" }, { "name": "cli@v27.4.1+incompatible", "product_id": "CSAFPID-0223" }, { "name": "cli@v28.0.0+incompatible", "product_id": "CSAFPID-0224" }, { "name": "compress@v1.17.11", "product_id": "CSAFPID-0245" }, { "name": "compress@v1.17.7", "product_id": "CSAFPID-0246" }, { "name": "compress@v1.18.4", "product_id": "CSAFPID-0247" }, { "name": "containerd@v1.7.11", "product_id": "CSAFPID-0164" }, { "name": "containerd@v1.7.32", "product_id": "CSAFPID-0203" }, { "name": "coreutils-single@8.32-41.el9_8", "product_id": "CSAFPID-0110", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/coreutils-single@8.32-41.el9_8?arch=x86_64&distro=rhel-9.8&upstream=coreutils-8.32-41.el9_8.src.rpm" ] } }, { "name": "crypto@v0.32.0", "product_id": "CSAFPID-0176" }, { "name": "crypto@v0.33.0", "product_id": "CSAFPID-0177" }, { "name": "crypto@v0.39.0", "product_id": "CSAFPID-0178" }, { "name": "crypto@v0.49.0", "product_id": "CSAFPID-0179" }, { "name": "crypto@v0.53.0", "product_id": "CSAFPID-0248" }, { "name": "curl-minimal@7.76.1-40.el9", "product_id": "CSAFPID-0030", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/curl-minimal@7.76.1-40.el9?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9.src.rpm" ] } }, { "name": "docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589", "product_id": "CSAFPID-0259" }, { "name": "docker@v25.0.6+incompatible", "product_id": "CSAFPID-0184" }, { "name": "docker@v27.4.1+incompatible", "product_id": "CSAFPID-0185" }, { "name": "docker@v28.0.0+incompatible", "product_id": "CSAFPID-0229" }, { "name": "eventstream@v1.6.8", "product_id": "CSAFPID-0234" }, { "name": "expat@2.5.0", "product_id": "CSAFPID-0017", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/expat@2.5.0-6.el9_8.1?arch=x86_64&checksum=sha256%3A6a0c98d67b643fe620297e4cd7e990f99a86ed6bc90a8295a952c626ecbb9f62&repository_id=rhel-9-for-x86_64-baseos-rpms" ] } }, { "name": "fulcio@v1.4.3", "product_id": "CSAFPID-0186" }, { "name": "fulcio@v1.6.6", "product_id": "CSAFPID-0187" }, { "name": "gawk@5.1.0-6.el9", "product_id": "CSAFPID-0106", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/gawk@5.1.0-6.el9?arch=x86_64&distro=rhel-9.8&upstream=gawk-5.1.0-6.el9.src.rpm" ] } }, { "name": "git@2.52.0", "product_id": "CSAFPID-0093", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/git@2.52.0-1.el9?arch=x86_64&checksum=sha256%3Abe1c2f855001bf01cb5c5b0ff59d8943ddc4c4eedbbbddd68474d2aa6e11395c&repository_id=rhel-9-for-x86_64-appstream-rpms" ] } }, { "name": "github.com/Azure/go-ntlmssp@v0.0.0-20211209120228-48547f28849e", "product_id": "CSAFPID-0129", "product_identification_helper": { "purls": [ "pkg:golang/github.com/azure/go-ntlmssp@v0.0.0-20211209120228-48547f28849e" ] } }, { "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.8", "product_id": "CSAFPID-0134", "product_identification_helper": { "purls": [ "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.6.8" ] } }, { "name": "github.com/aws/aws-sdk-go-v2/service/s3@v1.76.0", "product_id": "CSAFPID-0135", "product_identification_helper": { "purls": [ "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.76.0" ] } }, { "name": "github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589", "product_id": "CSAFPID-0156", "product_identification_helper": { "purls": [ "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589" ] } }, { "name": "github.com/cloudflare/circl@v1.3.7", "product_id": "CSAFPID-0146", "product_identification_helper": { "purls": [ "pkg:golang/github.com/cloudflare/circl@v1.3.7" ] } }, { "name": "github.com/cloudflare/circl@v1.6.1", "product_id": "CSAFPID-0147", "product_identification_helper": { "purls": [ "pkg:golang/github.com/cloudflare/circl@v1.6.1" ] } }, { "name": "github.com/containerd/containerd@v1.7.11", "product_id": "CSAFPID-0012", "product_identification_helper": { "purls": [ "pkg:golang/github.com/containerd/containerd@v1.7.11" ] } }, { "name": "github.com/containerd/containerd@v1.7.32", "product_id": "CSAFPID-0013", "product_identification_helper": { "purls": [ "pkg:golang/github.com/containerd/containerd@v1.7.32" ] } }, { "name": "github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250", "product_id": "CSAFPID-0037", "product_identification_helper": { "purls": [ "pkg:golang/github.com/distribution/distribution/v3@v3.0.0-20230519140516-983358f8e250" ] } }, { "name": "github.com/docker/cli@v27.4.1+incompatible", "product_id": "CSAFPID-0060", "product_identification_helper": { "purls": [ "pkg:golang/github.com/docker/cli@v27.4.1%2Bincompatible" ] } }, { "name": "github.com/docker/cli@v28.0.0+incompatible", "product_id": "CSAFPID-0061", "product_identification_helper": { "purls": [ "pkg:golang/github.com/docker/cli@v28.0.0%2Bincompatible" ] } }, { "name": "github.com/docker/docker@v25.0.6+incompatible", "product_id": "CSAFPID-0067", "product_identification_helper": { "purls": [ "pkg:golang/github.com/docker/docker@v25.0.6%2Bincompatible" ] } }, { "name": "github.com/docker/docker@v27.4.1+incompatible", "product_id": "CSAFPID-0068", "product_identification_helper": { "purls": [ "pkg:golang/github.com/docker/docker@v27.4.1%2Bincompatible" ] } }, { "name": "github.com/docker/docker@v28.0.0+incompatible", "product_id": "CSAFPID-0069", "product_identification_helper": { "purls": [ "pkg:golang/github.com/docker/docker@v28.0.0%2Bincompatible" ] } }, { "name": "github.com/go-chi/chi/v5@v5.1.0", "product_id": "CSAFPID-0131", "product_identification_helper": { "purls": [ "pkg:golang/github.com/go-chi/chi/v5@v5.1.0" ] } }, { "name": "github.com/go-chi/chi@v4.1.2+incompatible", "product_id": "CSAFPID-0152", "product_identification_helper": { "purls": [ "pkg:golang/github.com/go-chi/chi@v4.1.2%2Bincompatible" ] } }, { "name": "github.com/go-git/go-billy/v5@v5.5.0", "product_id": "CSAFPID-0065", "product_identification_helper": { "purls": [ "pkg:golang/github.com/go-git/go-billy/v5@v5.5.0" ] } }, { "name": "github.com/go-git/go-billy/v5@v5.6.2", "product_id": "CSAFPID-0066", "product_identification_helper": { "purls": [ "pkg:golang/github.com/go-git/go-billy/v5@v5.6.2" ] } }, { "name": "github.com/go-git/go-git/v5@v5.11.0", "product_id": "CSAFPID-0008", "product_identification_helper": { "purls": [ "pkg:golang/github.com/go-git/go-git/v5@v5.11.0" ] } }, { "name": "github.com/go-git/go-git/v5@v5.13.2", "product_id": "CSAFPID-0036", "product_identification_helper": { "purls": [ "pkg:golang/github.com/go-git/go-git/v5@v5.13.2" ] } }, { "name": "github.com/go-jose/go-jose/v3@v3.0.3", "product_id": "CSAFPID-0047", "product_identification_helper": { "purls": [ "pkg:golang/github.com/go-jose/go-jose/v3@v3.0.3" ] } }, { "name": "github.com/go-jose/go-jose/v4@v4.0.5", "product_id": "CSAFPID-0048", "product_identification_helper": { "purls": [ "pkg:golang/github.com/go-jose/go-jose/v4@v4.0.5" ] } }, { "name": "github.com/golang-jwt/jwt/v4@v4.5.1", "product_id": "CSAFPID-0058", "product_identification_helper": { "purls": [ "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.1" ] } }, { "name": "github.com/golang-jwt/jwt/v5@v5.2.1", "product_id": "CSAFPID-0059", "product_identification_helper": { "purls": [ "pkg:golang/github.com/golang-jwt/jwt/v5@v5.2.1" ] } }, { "name": "github.com/golang/glog@v1.2.2", "product_id": "CSAFPID-0118", "product_identification_helper": { "purls": [ "pkg:golang/github.com/golang/glog@v1.2.2" ] } }, { "name": "github.com/google/cel-go@v0.23.2", "product_id": "CSAFPID-0127", "product_identification_helper": { "purls": [ "pkg:golang/github.com/google/cel-go@v0.23.2" ] } }, { "name": "github.com/gorilla/websocket@v1.5.0", "product_id": "CSAFPID-0132", "product_identification_helper": { "purls": [ "pkg:golang/github.com/gorilla/websocket@v1.5.0?type=module" ] } }, { "name": "github.com/in-toto/in-toto-golang@v0.9.1-0.20240317085821-8e2966059a09", "product_id": "CSAFPID-0130", "product_identification_helper": { "purls": [ "pkg:golang/github.com/in-toto/in-toto-golang@v0.9.1-0.20240317085821-8e2966059a09" ] } }, { "name": "github.com/klauspost/compress@v1.17.11", "product_id": "CSAFPID-0153", "product_identification_helper": { "purls": [ "pkg:golang/github.com/klauspost/compress@v1.17.11" ] } }, { "name": "github.com/klauspost/compress@v1.17.7", "product_id": "CSAFPID-0154", "product_identification_helper": { "purls": [ "pkg:golang/github.com/klauspost/compress@v1.17.7" ] } }, { "name": "github.com/klauspost/compress@v1.18.4", "product_id": "CSAFPID-0155", "product_identification_helper": { "purls": [ "pkg:golang/github.com/klauspost/compress@v1.18.4" ] } }, { "name": "github.com/moby/buildkit@v0.12.5", "product_id": "CSAFPID-0040", "product_identification_helper": { "purls": [ "pkg:golang/github.com/moby/buildkit@v0.12.5" ] } }, { "name": "github.com/moby/buildkit@v0.16.0", "product_id": "CSAFPID-0041", "product_identification_helper": { "purls": [ "pkg:golang/github.com/moby/buildkit@v0.16.0" ] } }, { "name": "github.com/moby/spdystream@v0.2.0", "product_id": "CSAFPID-0062", "product_identification_helper": { "purls": [ "pkg:golang/github.com/moby/spdystream@v0.2.0" ] } }, { "name": "github.com/moby/spdystream@v0.4.0", "product_id": "CSAFPID-0063", "product_identification_helper": { "purls": [ "pkg:golang/github.com/moby/spdystream@v0.4.0" ] } }, { "name": "github.com/moby/spdystream@v0.5.0", "product_id": "CSAFPID-0064", "product_identification_helper": { "purls": [ "pkg:golang/github.com/moby/spdystream@v0.5.0" ] } }, { "name": "github.com/modelcontextprotocol/go-sdk@v1.1.0", "product_id": "CSAFPID-0049", "product_identification_helper": { "purls": [ "pkg:golang/github.com/modelcontextprotocol/go-sdk@v1.1.0" ] } }, { "name": "github.com/opencontainers/runc@v1.1.12", "product_id": "CSAFPID-0050", "product_identification_helper": { "purls": [ "pkg:golang/github.com/opencontainers/runc@v1.1.12" ] } }, { "name": "github.com/opencontainers/selinux@v1.11.0", "product_id": "CSAFPID-0052", "product_identification_helper": { "purls": [ "pkg:golang/github.com/opencontainers/selinux@v1.11.0" ] } }, { "name": "github.com/openshift-pipelines/pipelines-as-code@v0.31.0", "product_id": "CSAFPID-0053", "product_identification_helper": { "purls": [ "pkg:golang/github.com/openshift-pipelines/pipelines-as-code@v0.31.0" ] } }, { "name": "github.com/openshift-pipelines/pipelines-as-code@v0.33.0", "product_id": "CSAFPID-0054", "product_identification_helper": { "purls": [ "pkg:golang/github.com/openshift-pipelines/pipelines-as-code@v0.33.0" ] } }, { "name": "github.com/sigstore/cosign/v2@v2.4.3", "product_id": "CSAFPID-0133", "product_identification_helper": { "purls": [ "pkg:golang/github.com/sigstore/cosign/v2@v2.4.3" ] } }, { "name": "github.com/sigstore/fulcio@v1.4.3", "product_id": "CSAFPID-0055", "product_identification_helper": { "purls": [ "pkg:golang/github.com/sigstore/fulcio@v1.4.3" ] } }, { "name": "github.com/sigstore/fulcio@v1.6.6", "product_id": "CSAFPID-0056", "product_identification_helper": { "purls": [ "pkg:golang/github.com/sigstore/fulcio@v1.6.6" ] } }, { "name": "github.com/sigstore/rekor@v1.2.2", "product_id": "CSAFPID-0038", "product_identification_helper": { "purls": [ "pkg:golang/github.com/sigstore/rekor@v1.2.2" ] } }, { "name": "github.com/sigstore/rekor@v1.3.9", "product_id": "CSAFPID-0039", "product_identification_helper": { "purls": [ "pkg:golang/github.com/sigstore/rekor@v1.3.9" ] } }, { "name": "github.com/sigstore/sigstore-go@v0.7.0", "product_id": "CSAFPID-0120", "product_identification_helper": { "purls": [ "pkg:golang/github.com/sigstore/sigstore-go@v0.7.0" ] } }, { "name": "github.com/sigstore/sigstore@v1.8.15", "product_id": "CSAFPID-0125", "product_identification_helper": { "purls": [ "pkg:golang/github.com/sigstore/sigstore@v1.8.15" ] } }, { "name": "github.com/sigstore/sigstore@v1.8.2", "product_id": "CSAFPID-0126", "product_identification_helper": { "purls": [ "pkg:golang/github.com/sigstore/sigstore@v1.8.2" ] } }, { "name": "github.com/sigstore/timestamp-authority@v1.2.4", "product_id": "CSAFPID-0042", "product_identification_helper": { "purls": [ "pkg:golang/github.com/sigstore/timestamp-authority@v1.2.4" ] } }, { "name": "github.com/tektoncd/pipeline@v0.65.1", "product_id": "CSAFPID-0123", "product_identification_helper": { "purls": [ "pkg:golang/github.com/tektoncd/pipeline@v0.65.1" ] } }, { "name": "github.com/tektoncd/pipeline@v0.68.0", "product_id": "CSAFPID-0124", "product_identification_helper": { "purls": [ "pkg:golang/github.com/tektoncd/pipeline@v0.68.0" ] } }, { "name": "github.com/theupdateframework/go-tuf/v2@v2.0.2", "product_id": "CSAFPID-0119", "product_identification_helper": { "purls": [ "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.0.2" ] } }, { "name": "github.com/ulikunitz/xz@v0.5.11", "product_id": "CSAFPID-0128", "product_identification_helper": { "purls": [ "pkg:golang/github.com/ulikunitz/xz@v0.5.11" ] } }, { "name": "glib2@2.68.4-19.el9_8.2", "product_id": "CSAFPID-0097", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/glib2@2.68.4-19.el9_8.2?arch=x86_64&distro=rhel-9.8&upstream=glib2-2.68.4-19.el9_8.2.src.rpm" ] } }, { "name": "glibc-common@2.34-275.el9_8", "product_id": "CSAFPID-0100", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/glibc-common@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm" ] } }, { "name": "glibc-minimal-langpack@2.34-275.el9_8", "product_id": "CSAFPID-0101", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/glibc-minimal-langpack@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm" ] } }, { "name": "glibc@2.34-275.el9_8", "product_id": "CSAFPID-0099", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/glibc@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm" ] } }, { "name": "glog@UNKNOWN", "product_id": "CSAFPID-0199" }, { "name": "glog@v1.2.2", "product_id": "CSAFPID-0200" }, { "name": "gnupg2@2.3.3-5.el9_7", "product_id": "CSAFPID-0094", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/gnupg2@2.3.3-5.el9_7?arch=x86_64&distro=rhel-9.8&upstream=gnupg2-2.3.3-5.el9_7.src.rpm" ] } }, { "name": "go-sdk@v1.1.0", "product_id": "CSAFPID-0205" }, { "name": "go.mongodb.org/mongo-driver@v1.14.0", "product_id": "CSAFPID-0121", "product_identification_helper": { "purls": [ "pkg:golang/go.mongodb.org/mongo-driver@v1.14.0" ] } }, { "name": "go.mongodb.org/mongo-driver@v1.16.1", "product_id": "CSAFPID-0122", "product_identification_helper": { "purls": [ "pkg:golang/go.mongodb.org/mongo-driver@v1.16.1" ] } }, { "name": "go.opentelemetry.io/otel/sdk@v1.34.0", "product_id": "CSAFPID-0051", "product_identification_helper": { "purls": [ "pkg:golang/go.opentelemetry.io/otel/sdk@v1.34.0" ] } }, { "name": "go.opentelemetry.io/otel@v1.43.0", "product_id": "CSAFPID-0136", "product_identification_helper": { "purls": [ "pkg:golang/go.opentelemetry.io/otel@v1.43.0" ] } }, { "name": "golang.org/x/crypto@v0.32.0", "product_id": "CSAFPID-0001", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/crypto@v0.32.0" ] } }, { "name": "golang.org/x/crypto@v0.33.0", "product_id": "CSAFPID-0002", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/crypto@v0.33.0" ] } }, { "name": "golang.org/x/crypto@v0.39.0", "product_id": "CSAFPID-0003", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/crypto@v0.39.0" ] } }, { "name": "golang.org/x/crypto@v0.49.0", "product_id": "CSAFPID-0004", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/crypto@v0.49.0" ] } }, { "name": "golang.org/x/crypto@v0.53.0", "product_id": "CSAFPID-0088", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/crypto@v0.53.0" ] } }, { "name": "golang.org/x/mod@v0.22.0", "product_id": "CSAFPID-0085", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/mod@v0.22.0" ] } }, { "name": "golang.org/x/mod@v0.25.0", "product_id": "CSAFPID-0086", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/mod@v0.25.0" ] } }, { "name": "golang.org/x/mod@v0.33.0", "product_id": "CSAFPID-0087", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/mod@v0.33.0" ] } }, { "name": "golang.org/x/net@v0.33.0", "product_id": "CSAFPID-0070", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/net@v0.33.0" ] } }, { "name": "golang.org/x/net@v0.34.0", "product_id": "CSAFPID-0071", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/net@v0.34.0" ] } }, { "name": "golang.org/x/net@v0.35.0", "product_id": "CSAFPID-0072", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/net@v0.35.0" ] } }, { "name": "golang.org/x/net@v0.41.0", "product_id": "CSAFPID-0073", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/net@v0.41.0" ] } }, { "name": "golang.org/x/net@v0.52.0", "product_id": "CSAFPID-0074", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/net@v0.52.0" ] } }, { "name": "golang.org/x/net@v0.55.0", "product_id": "CSAFPID-0078", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/net@v0.55.0?type=module" ] } }, { "name": "golang.org/x/oauth2@v0.12.0", "product_id": "CSAFPID-0043", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/oauth2@v0.12.0" ] } }, { "name": "golang.org/x/oauth2@v0.18.0", "product_id": "CSAFPID-0044", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/oauth2@v0.18.0" ] } }, { "name": "golang.org/x/oauth2@v0.23.0", "product_id": "CSAFPID-0045", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/oauth2@v0.23.0" ] } }, { "name": "golang.org/x/oauth2@v0.26.0", "product_id": "CSAFPID-0046", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/oauth2@v0.26.0" ] } }, { "name": "golang.org/x/sys@v0.29.0", "product_id": "CSAFPID-0148", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/sys@v0.29.0" ] } }, { "name": "golang.org/x/sys@v0.30.0", "product_id": "CSAFPID-0149", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/sys@v0.30.0" ] } }, { "name": "golang.org/x/sys@v0.33.0", "product_id": "CSAFPID-0150", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/sys@v0.33.0" ] } }, { "name": "golang.org/x/sys@v0.42.0", "product_id": "CSAFPID-0151", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/sys@v0.42.0" ] } }, { "name": "golang.org/x/text@v0.21.0", "product_id": "CSAFPID-0079", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/text@v0.21.0" ] } }, { "name": "golang.org/x/text@v0.22.0", "product_id": "CSAFPID-0080", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/text@v0.22.0" ] } }, { "name": "golang.org/x/text@v0.26.0", "product_id": "CSAFPID-0081", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/text@v0.26.0" ] } }, { "name": "golang.org/x/text@v0.35.0", "product_id": "CSAFPID-0082", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/text@v0.35.0" ] } }, { "name": "golang.org/x/text@v0.37.0", "product_id": "CSAFPID-0083", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/text@v0.37.0?type=module" ] } }, { "name": "golang.org/x/text@v0.38.0", "product_id": "CSAFPID-0084", "product_identification_helper": { "purls": [ "pkg:golang/golang.org/x/text@v0.38.0" ] } }, { "name": "google.golang.org/grpc@v1.67.1", "product_id": "CSAFPID-0005", "product_identification_helper": { "purls": [ "pkg:golang/google.golang.org/grpc@v1.67.1" ] } }, { "name": "google.golang.org/grpc@v1.69.4", "product_id": "CSAFPID-0006", "product_identification_helper": { "purls": [ "pkg:golang/google.golang.org/grpc@v1.69.4" ] } }, { "name": "google.golang.org/grpc@v1.70.0", "product_id": "CSAFPID-0007", "product_identification_helper": { "purls": [ "pkg:golang/google.golang.org/grpc@v1.70.0" ] } }, { "name": "google.golang.org/grpc@v1.79.3", "product_id": "CSAFPID-0034", "product_identification_helper": { "purls": [ "pkg:golang/google.golang.org/grpc@v1.79.3" ] } }, { "name": "google.golang.org/grpc@v1.80.0", "product_id": "CSAFPID-0035", "product_identification_helper": { "purls": [ "pkg:golang/google.golang.org/grpc@v1.80.0" ] } }, { "name": "grpc@v1.67.1", "product_id": "CSAFPID-0167" }, { "name": "grpc@v1.69.4", "product_id": "CSAFPID-0168" }, { "name": "grpc@v1.70.0", "product_id": "CSAFPID-0169" }, { "name": "grpc@v1.79.3", "product_id": "CSAFPID-0170" }, { "name": "grpc@v1.80.0", "product_id": "CSAFPID-0171" }, { "name": "gzip@1.12", "product_id": "CSAFPID-0107", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/gzip@1.12-1.el9?arch=x86_64&checksum=sha256%3Ac8b3e0414d55b1eedb0185a564ac6cb2368bee2fd5f995447d045f6a714488ac&repository_id=rhel-9-for-x86_64-baseos-rpms" ] } }, { "name": "in-toto-golang@v0.9.1-0.20240317085821-8e2966059a09", "product_id": "CSAFPID-0228" }, { "name": "jq@1.6", "product_id": "CSAFPID-0022", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/jq@1.6-19.el9_8.2?arch=x86_64&checksum=sha256%3A9793a39a4746a09ba89c3d9ccc70150ac6c878286deee26d7e3aabede4666417&repository_id=rhel-9-for-x86_64-baseos-rpms" ] } }, { "name": "krb5-libs@1.21.1-10.el9_8", "product_id": "CSAFPID-0095", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/krb5-libs@1.21.1-10.el9_8?arch=x86_64&distro=rhel-9.8&upstream=krb5-1.21.1-10.el9_8.src.rpm" ] } }, { "name": "kubevirt@UNKNOWN", "product_id": "CSAFPID-0163" }, { "name": "less@590", "product_id": "CSAFPID-0016", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/less@590-6.el9?arch=x86_64&checksum=sha256%3A5bd040f9dd813167935fc390d546c119d90e0a9c77447a3d9ed1ef69c6f5a32a&repository_id=rhel-9-for-x86_64-baseos-rpms" ] } }, { "name": "libarchive@3.5.3-11.el9_8", "product_id": "CSAFPID-0091", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/libarchive@3.5.3-11.el9_8?arch=x86_64&distro=rhel-9.8&upstream=libarchive-3.5.3-11.el9_8.src.rpm" ] } }, { "name": "libattr@2.5.1-3.el9", "product_id": "CSAFPID-0109", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/libattr@2.5.1-3.el9?arch=x86_64&distro=rhel-9.8&upstream=attr-2.5.1-3.el9.src.rpm" ] } }, { "name": "libblkid@2.37.4-25.el9", "product_id": "CSAFPID-0023", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/libblkid@2.37.4-25.el9?arch=x86_64&distro=rhel-9.8&upstream=util-linux-2.37.4-25.el9.src.rpm" ] } }, { "name": "libcurl-minimal@7.76.1-40.el9", "product_id": "CSAFPID-0031", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9.src.rpm" ] } }, { "name": "libeconf@0.4.1", "product_id": "CSAFPID-0014", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/libeconf@0.4.1-7.el9_8?arch=x86_64&checksum=sha256%3Aa570c5baaedeb1445bc2e4f3930b0a709411bbefbdbf463c3e006cbfc7018894&repository_id=rhel-9-for-x86_64-baseos-rpms" ] } }, { "name": "libevent@2.1.12-8.el9_4", "product_id": "CSAFPID-0028", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/libevent@2.1.12-8.el9_4?arch=x86_64&distro=rhel-9.8&upstream=libevent-2.1.12-8.el9_4.src.rpm" ] } }, { "name": "libgcc@11.5.0-14.el9", "product_id": "CSAFPID-0137", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/libgcc@11.5.0-14.el9?arch=x86_64&distro=rhel-9.8&upstream=gcc-11.5.0-14.el9.src.rpm" ] } }, { "name": "libgcrypt@1.10.0-13.el9_8", "product_id": "CSAFPID-0145", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/libgcrypt@1.10.0-13.el9_8?arch=x86_64&distro=rhel-9.8&upstream=libgcrypt-1.10.0-13.el9_8.src.rpm" ] } }, { "name": "libmount@2.37.4-25.el9", "product_id": "CSAFPID-0024", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/libmount@2.37.4-25.el9?arch=x86_64&distro=rhel-9.8&upstream=util-linux-2.37.4-25.el9.src.rpm" ] } }, { "name": "libnghttp2@1.43.0-6.el9_8.1", "product_id": "CSAFPID-0111", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/libnghttp2@1.43.0-6.el9_8.1?arch=x86_64&distro=rhel-9.8&upstream=nghttp2-1.43.0-6.el9_8.1.src.rpm" ] } }, { "name": "libsmartcols@2.37.4-25.el9", "product_id": "CSAFPID-0025", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/libsmartcols@2.37.4-25.el9?arch=x86_64&distro=rhel-9.8&upstream=util-linux-2.37.4-25.el9.src.rpm" ] } }, { "name": "libsolv@0.7.24-6.el9_8", "product_id": "CSAFPID-0116", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/libsolv@0.7.24-6.el9_8?arch=x86_64&distro=rhel-9.8&upstream=libsolv-0.7.24-6.el9_8.src.rpm" ] } }, { "name": "libstdc++@11.5.0-14.el9", "product_id": "CSAFPID-0138", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/libstdc%2B%2B@11.5.0-14.el9?arch=x86_64&distro=rhel-9.8&upstream=gcc-11.5.0-14.el9.src.rpm" ] } }, { "name": "libuuid@2.37.4-25.el9", "product_id": "CSAFPID-0026", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/libuuid@2.37.4-25.el9?arch=x86_64&distro=rhel-9.8&upstream=util-linux-2.37.4-25.el9.src.rpm" ] } }, { "name": "libxml2@2.9.13-14.el9_8.2", "product_id": "CSAFPID-0029", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/libxml2@2.9.13-14.el9_8.2?arch=x86_64&distro=rhel-9.8&upstream=libxml2-2.9.13-14.el9_8.2.src.rpm" ] } }, { "name": "mod@v0.22.0", "product_id": "CSAFPID-0256" }, { "name": "mod@v0.25.0", "product_id": "CSAFPID-0257" }, { "name": "mod@v0.33.0", "product_id": "CSAFPID-0258" }, { "name": "mongo-driver@v1.14.0", "product_id": "CSAFPID-0210" }, { "name": "mongo-driver@v1.16.1", "product_id": "CSAFPID-0211" }, { "name": "nano@5.6.1", "product_id": "CSAFPID-0113", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/nano@5.6.1-7.el9?arch=x86_64&checksum=sha256%3A5d1a2753d43cfbf4e3826e0132d482b315c579547762a65d32bbf4832fb9404d&repository_id=rhel-9-for-x86_64-baseos-rpms" ] } }, { "name": "ncurses-base@6.2-12.20210508.el9", "product_id": "CSAFPID-0141", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/ncurses-base@6.2-12.20210508.el9?arch=noarch&distro=rhel-9.8&upstream=ncurses-6.2-12.20210508.el9.src.rpm" ] } }, { "name": "ncurses-libs@6.2-12.20210508.el9", "product_id": "CSAFPID-0142", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/ncurses-libs@6.2-12.20210508.el9?arch=x86_64&distro=rhel-9.8&upstream=ncurses-6.2-12.20210508.el9.src.rpm" ] } }, { "name": "ncurses@6.2", "product_id": "CSAFPID-0090", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/ncurses@6.2-12.20210508.el9?arch=x86_64&checksum=sha256%3Ad2835ed9dbf6c4e1db0dfae027cc2a3615b62e4593c8c38eec7273c995b8ac39&repository_id=rhel-9-for-x86_64-baseos-rpms" ] } }, { "name": "net/http", "product_id": "CSAFPID-0117", "product_identification_helper": { "purls": [ "pkg:golang/net/http?type=package" ] } }, { "name": "net@v0.33.0", "product_id": "CSAFPID-0188" }, { "name": "net@v0.34.0", "product_id": "CSAFPID-0189" }, { "name": "net@v0.35.0", "product_id": "CSAFPID-0190" }, { "name": "net@v0.41.0", "product_id": "CSAFPID-0191" }, { "name": "net@v0.52.0", "product_id": "CSAFPID-0192" }, { "name": "net@v0.55.0", "product_id": "CSAFPID-0249" }, { "name": "oauth2@v0.12.0", "product_id": "CSAFPID-0195" }, { "name": "oauth2@v0.18.0", "product_id": "CSAFPID-0196" }, { "name": "oauth2@v0.23.0", "product_id": "CSAFPID-0197" }, { "name": "oauth2@v0.26.0", "product_id": "CSAFPID-0198" }, { "name": "openldap@2.6.8-4.el9", "product_id": "CSAFPID-0102", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/openldap@2.6.8-4.el9?arch=x86_64&distro=rhel-9.8&upstream=openldap-2.6.8-4.el9.src.rpm" ] } }, { "name": "openssh@9.9p1", "product_id": "CSAFPID-0021", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/openssh@9.9p1-9.el9_8?arch=x86_64&checksum=sha256%3Acd14a09ebe95a8d09a779838bf71f8e05f809cbd1d7ef4553294284d35249a60&repository_id=rhel-9-for-x86_64-baseos-rpms" ] } }, { "name": "openssl-fips-provider-so@3.0.7-11.el9_8", "product_id": "CSAFPID-0104", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/openssl-fips-provider-so@3.0.7-11.el9_8?arch=x86_64&distro=rhel-9.8&upstream=openssl-fips-provider-3.0.7-11.el9_8.src.rpm" ] } }, { "name": "openssl-fips-provider@3.0.7-11.el9_8", "product_id": "CSAFPID-0103", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/openssl-fips-provider@3.0.7-11.el9_8?arch=x86_64&distro=rhel-9.8&upstream=openssl-fips-provider-3.0.7-11.el9_8.src.rpm" ] } }, { "name": "openssl-libs@1:3.5.5-6.el9_8", "product_id": "CSAFPID-0020", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/openssl-libs@3.5.5-6.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.5-6.el9_8.src.rpm" ] } }, { "name": "openssl@1:3.5.5", "product_id": "CSAFPID-0019", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/openssl@3.5.5-6.el9_8?arch=x86_64&checksum=sha256%3A1c502507f42674119318b66b111448f618efe2767a55edde5fadddcecb47ac64&epoch=1&repository_id=rhel-9-for-x86_64-baseos-rpms" ] } }, { "name": "oras.land/oras-go/v2@v2.6.1", "product_id": "CSAFPID-0057", "product_identification_helper": { "purls": [ "pkg:golang/oras.land/oras-go/v2@v2.6.1" ] } }, { "name": "otel@v1.43.0", "product_id": "CSAFPID-0244" }, { "name": "pam@1.5.1", "product_id": "CSAFPID-0015", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/pam@1.5.1-28.el9?arch=x86_64&checksum=sha256%3A15a0a5000af6f57f47c30682f7aacf3959903788e68255132b6a05bb4b713ab1&repository_id=rhel-9-for-x86_64-baseos-rpms" ] } }, { "name": "pcre2-syntax@10.40-6.el9", "product_id": "CSAFPID-0033", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch&distro=rhel-9.8&upstream=pcre2-10.40-6.el9.src.rpm" ] } }, { "name": "pcre2@10.40-6.el9", "product_id": "CSAFPID-0032", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64&distro=rhel-9.8&upstream=pcre2-10.40-6.el9.src.rpm" ] } }, { "name": "perl-HTTP-Tiny@0.076", "product_id": "CSAFPID-0092", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/perl-HTTP-Tiny@0.076-462.el9?arch=noarch&checksum=sha256%3A696f388a50f5be81596757d68251067449203e1c126ee8c23a7c5a0ad1ac5418&repository_id=rhel-9-for-x86_64-appstream-rpms" ] } }, { "name": "perl-Socket@4:2.031", "product_id": "CSAFPID-0096", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/perl-Socket@2.031-4.el9?arch=x86_64&checksum=sha256%3A762751146305f9aea53b74a21495a610e7bdde956fa3246565d265b1128b56a8&epoch=4&repository_id=rhel-9-for-x86_64-appstream-rpms" ] } }, { "name": "pipeline@v0.65.1", "product_id": "CSAFPID-0212" }, { "name": "pipeline@v0.68.0", "product_id": "CSAFPID-0213" }, { "name": "pipelines-as-code@v0.31.0", "product_id": "CSAFPID-0193" }, { "name": "pipelines-as-code@v0.33.0", "product_id": "CSAFPID-0194" }, { "name": "pkgconf@1.7.3", "product_id": "CSAFPID-0139", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/pkgconf@1.7.3-10.el9?arch=x86_64&checksum=sha256%3Abb47b4ecc499c308f41031a99e723827d152d5d750f59849d0c265d820944a26&repository_id=rhel-9-for-x86_64-baseos-rpms" ] } }, { "name": "popt@1.18-8.el9", "product_id": "CSAFPID-0143", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/popt@1.18-8.el9?arch=x86_64&distro=rhel-9.8&upstream=popt-1.18-8.el9.src.rpm" ] } }, { "name": "procps-ng@3.3.17", "product_id": "CSAFPID-0140", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/procps-ng@3.3.17-14.el9?arch=x86_64&checksum=sha256%3A506ad778f63821e8d9647ca8e0a3ff21b8af9c1666060d5200f9b26ee718333c&repository_id=rhel-9-for-x86_64-baseos-rpms" ] } }, { "name": "rekor@v1.2.2", "product_id": "CSAFPID-0165" }, { "name": "rekor@v1.3.9", "product_id": "CSAFPID-0166" }, { "name": "rpm-libs@4.16.1.3-40.el9", "product_id": "CSAFPID-0115", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/rpm-libs@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm" ] } }, { "name": "rpm@4.16.1.3-40.el9", "product_id": "CSAFPID-0114", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/rpm@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm" ] } }, { "name": "runc@v1.1.12", "product_id": "CSAFPID-0207" }, { "name": "s3@v1.76.0", "product_id": "CSAFPID-0235" }, { "name": "sdk@v1.34.0", "product_id": "CSAFPID-0206" }, { "name": "sed@4.8-10.el9", "product_id": "CSAFPID-0112", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/sed@4.8-10.el9?arch=x86_64&distro=rhel-9.8&upstream=sed-4.8-10.el9.src.rpm" ] } }, { "name": "selinux@v1.11.0", "product_id": "CSAFPID-0209" }, { "name": "sigstore-go@v0.7.0", "product_id": "CSAFPID-0208" }, { "name": "sigstore@v1.8.15", "product_id": "CSAFPID-0214" }, { "name": "sigstore@v1.8.2", "product_id": "CSAFPID-0215" }, { "name": "spdystream@v0.2.0", "product_id": "CSAFPID-0225" }, { "name": "spdystream@v0.4.0", "product_id": "CSAFPID-0226" }, { "name": "spdystream@v0.5.0", "product_id": "CSAFPID-0227" }, { "name": "sqlite-libs@3.34.1-10.el9_8", "product_id": "CSAFPID-0018", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/sqlite-libs@3.34.1-10.el9_8?arch=x86_64&distro=rhel-9.8&upstream=sqlite-3.34.1-10.el9_8.src.rpm" ] } }, { "name": "stdlib@1.22.12", "product_id": "CSAFPID-0157", "product_identification_helper": { "purls": [ "pkg:golang/stdlib@1.22.12" ] } }, { "name": "stdlib@1.23.6", "product_id": "CSAFPID-0158", "product_identification_helper": { "purls": [ "pkg:golang/stdlib@1.23.6" ] } }, { "name": "stdlib@1.25.5", "product_id": "CSAFPID-0159", "product_identification_helper": { "purls": [ "pkg:golang/stdlib@1.25.5" ] } }, { "name": "stdlib@1.25.9", "product_id": "CSAFPID-0160", "product_identification_helper": { "purls": [ "pkg:golang/stdlib@1.25.9" ] } }, { "name": "stdlib@1.26.2", "product_id": "CSAFPID-0161", "product_identification_helper": { "purls": [ "pkg:golang/stdlib@1.26.2" ] } }, { "name": "stdlib@1.26.5", "product_id": "CSAFPID-0162", "product_identification_helper": { "purls": [ "pkg:golang/stdlib@1.26.5" ] } }, { "name": "stdlib@go1.22.12", "product_id": "CSAFPID-0009", "product_identification_helper": { "purls": [ "pkg:golang/stdlib@1.22.12" ] } }, { "name": "stdlib@go1.23.6", "product_id": "CSAFPID-0010", "product_identification_helper": { "purls": [ "pkg:golang/stdlib@1.23.6" ] } }, { "name": "stdlib@go1.25.5", "product_id": "CSAFPID-0011", "product_identification_helper": { "purls": [ "pkg:golang/stdlib@1.25.5" ] } }, { "name": "stdlib@go1.25.9", "product_id": "CSAFPID-0075", "product_identification_helper": { "purls": [ "pkg:golang/stdlib@1.25.9" ] } }, { "name": "stdlib@go1.26.2", "product_id": "CSAFPID-0076", "product_identification_helper": { "purls": [ "pkg:golang/stdlib@1.26.2" ] } }, { "name": "stdlib@go1.26.5", "product_id": "CSAFPID-0077", "product_identification_helper": { "purls": [ "pkg:golang/stdlib@1.26.5" ] } }, { "name": "submariner-operator@v0.24.0", "product_id": "CSAFPID-0238" }, { "name": "sys@v0.29.0", "product_id": "CSAFPID-0240" }, { "name": "sys@v0.30.0", "product_id": "CSAFPID-0241" }, { "name": "sys@v0.33.0", "product_id": "CSAFPID-0242" }, { "name": "sys@v0.42.0", "product_id": "CSAFPID-0243" }, { "name": "systemd-libs@252-67.el9_8.4", "product_id": "CSAFPID-0098", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/systemd-libs@252-67.el9_8.4?arch=x86_64&distro=rhel-9.8&upstream=systemd-252-67.el9_8.4.src.rpm" ] } }, { "name": "tar@2:1.34", "product_id": "CSAFPID-0089", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/tar@1.34-11.el9?arch=x86_64&checksum=sha256%3A58b622ab7bc225731a2473e677f16c9eb51b1ed218a86a7aa039a6fed665f245&epoch=2&repository_id=rhel-9-for-x86_64-baseos-rpms" ] } }, { "name": "text@v0.21.0", "product_id": "CSAFPID-0250" }, { "name": "text@v0.22.0", "product_id": "CSAFPID-0251" }, { "name": "text@v0.26.0", "product_id": "CSAFPID-0252" }, { "name": "text@v0.35.0", "product_id": "CSAFPID-0253" }, { "name": "text@v0.37.0", "product_id": "CSAFPID-0254" }, { "name": "text@v0.38.0", "product_id": "CSAFPID-0255" }, { "name": "timestamp-authority@v1.2.4", "product_id": "CSAFPID-0183" }, { "name": "unknown", "product_id": "CSAFPID-0260", "product_identification_helper": { "purls": [ "pkg:golang/kubevirt.io/kubevirt" ] } }, { "name": "util-linux@2.37.4", "product_id": "CSAFPID-0027", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/util-linux@2.37.4-25.el9?arch=x86_64&checksum=sha256%3A35e0b73e574a7d8e93af0adf54adb2303f03423fd5761e357df86288f59d7933&repository_id=rhel-9-for-x86_64-baseos-rpms" ] } }, { "name": "v2@v2.0.2", "product_id": "CSAFPID-0204" }, { "name": "v2@v2.4.3", "product_id": "CSAFPID-0233" }, { "name": "v2@v2.6.1", "product_id": "CSAFPID-0216" }, { "name": "v3@UNKNOWN", "product_id": "CSAFPID-0182" }, { "name": "v3@v3.0.0-20230519140516-983358f8e250", "product_id": "CSAFPID-0175" }, { "name": "v3@v3.0.3", "product_id": "CSAFPID-0201" }, { "name": "v4@v4.0.5", "product_id": "CSAFPID-0202" }, { "name": "v4@v4.5.1", "product_id": "CSAFPID-0221" }, { "name": "v5@v5.1.0", "product_id": "CSAFPID-0231" }, { "name": "v5@v5.11.0", "product_id": "CSAFPID-0173" }, { "name": "v5@v5.13.2", "product_id": "CSAFPID-0174" }, { "name": "v5@v5.2.1", "product_id": "CSAFPID-0222" }, { "name": "v5@v5.5.0", "product_id": "CSAFPID-0219" }, { "name": "v5@v5.6.2", "product_id": "CSAFPID-0220" }, { "name": "websocket@v1.5.0", "product_id": "CSAFPID-0232" }, { "name": "xz-libs@5.2.5-8.el9_0", "product_id": "CSAFPID-0105", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/xz-libs@5.2.5-8.el9_0?arch=x86_64&distro=rhel-9.8&upstream=xz-5.2.5-8.el9_0.src.rpm" ] } }, { "name": "xz@v0.5.11", "product_id": "CSAFPID-0218" }, { "name": "zlib@1.2.11-40.el9", "product_id": "CSAFPID-0144", "product_identification_helper": { "purls": [ "pkg:rpm/redhat/zlib@1.2.11-40.el9?arch=x86_64&distro=rhel-9.8&upstream=zlib-1.2.11-40.el9.src.rpm" ] } } ] }, "vulnerabilities": [ { "cve": "CVE-2005-2541", "notes": [ { "category": "description", "text": "A flaw was found in tar utility that can allow the root user to extract files with preserved setuid and setgid permissions without any warning. This behavior can lead to the creation of malicious setuid executables owned by root from a crafted tar file, posing significant security risks." } ], "product_status": { "known_affected": [ "CSAFPID-0089" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.0, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0089" ] } ], "title": "CVE-2005-2541" }, { "cve": "CVE-2020-11013", "notes": [ { "category": "description", "text": "Lookup function information discolosure in helm" } ], "product_status": { "known_affected": [ "CSAFPID-0260" ] }, "title": "CVE-2020-11013" }, { "cve": "CVE-2020-14316", "notes": [ { "category": "description", "text": "Privilege Escalation in kubevirt" } ], "product_status": { "known_affected": [ "CSAFPID-0163", "CSAFPID-0260" ] }, "title": "GHSA-828r-r2c8-rfw3" }, { "cve": "CVE-2020-15184", "notes": [ { "category": "description", "text": "Aliases are never checked in helm" } ], "product_status": { "known_affected": [ "CSAFPID-0260" ] }, "title": "CVE-2020-15184" }, { "cve": "CVE-2020-15185", "notes": [ { "category": "description", "text": "Repository index file allows for duplicates of the same chart entry in helm" } ], "product_status": { "known_affected": [ "CSAFPID-0260" ] }, "title": "CVE-2020-15185" }, { "cve": "CVE-2020-15186", "notes": [ { "category": "description", "text": "Improper Sanitizing of plugin names in helm" } ], "product_status": { "known_affected": [ "CSAFPID-0260" ] }, "title": "CVE-2020-15186" }, { "cve": "CVE-2020-15187", "notes": [ { "category": "description", "text": "plugin.yaml file allows for duplicate entries in helm" } ], "product_status": { "known_affected": [ "CSAFPID-0260" ] }, "title": "CVE-2020-15187" }, { "cve": "CVE-2020-1701", "notes": [ { "category": "description", "text": "Permissions bypass in KubeVirt" } ], "product_status": { "known_affected": [ "CSAFPID-0163", "CSAFPID-0260" ] }, "title": "GHSA-849r-8wvp-4wwg" }, { "cve": "CVE-2020-4053", "notes": [ { "category": "description", "text": "Plugin archive directory traversal in Helm" } ], "product_status": { "known_affected": [ "CSAFPID-0260" ] }, "title": "CVE-2020-4053" }, { "cve": "CVE-2020-7919", "notes": [ { "category": "description", "text": "Helm uses crypto package vulnerable to panic from malformed X.509 certificate" } ], "product_status": { "known_affected": [ "CSAFPID-0260" ] }, "title": "CVE-2020-7919" }, { "cve": "CVE-2020-8911", "notes": [ { "category": "description", "text": "CBC padding oracle issue in AWS S3 Crypto SDK for golang in github.com/aws/aws-sdk-go" } ], "product_status": { "known_affected": [ "CSAFPID-0236", "CSAFPID-0237", "CSAFPID-0260" ] }, "title": "GO-2022-0646" }, { "cve": "CVE-2020-8912", "notes": [ { "category": "description", "text": "In-band key negotiation issue in AWS S3 Crypto SDK for golang in github.com/aws/aws-sdk-go" } ], "product_status": { "known_affected": [ "CSAFPID-0236", "CSAFPID-0237", "CSAFPID-0260" ] }, "title": "GO-2022-0635" }, { "cve": "CVE-2021-21303", "notes": [ { "category": "description", "text": "Improper Neutralization of Special Elements in Output in helm.sh/helm/v3" } ], "product_status": { "known_affected": [ "CSAFPID-0260" ] }, "title": "CVE-2021-21303" }, { "cve": "CVE-2021-32690", "notes": [ { "category": "description", "text": "Helm passes repository credentials to alternate domain" } ], "product_status": { "known_affected": [ "CSAFPID-0182", "CSAFPID-0260" ] }, "title": "GHSA-56hp-xqp3-w2jf" }, { "cve": "CVE-2021-46195", "notes": [ { "category": "description", "text": "A flaw was discovered in the GNU libiberty library within the demangle_path() function in rust-demangle.c, as distributed in the GNU Compiler Collection (GCC). This flaw allows a crafted symbol to cause stack memory to be exhausted, leading to a crash." } ], "product_status": { "known_affected": [ "CSAFPID-0137", "CSAFPID-0138" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0137", "CSAFPID-0138" ] } ], "title": "CVE-2021-46195" }, { "cve": "CVE-2022-1798", "notes": [ { "category": "description", "text": "KubeVirt vulnerable to arbitrary file read on host" } ], "product_status": { "known_affected": [ "CSAFPID-0260" ] }, "title": "CVE-2022-1798" }, { "cve": "CVE-2022-23524", "notes": [ { "category": "description", "text": "Helm vulnerable to denial of service through string value parsing" } ], "product_status": { "known_affected": [ "CSAFPID-0182", "CSAFPID-0260" ] }, "title": "GHSA-6rx9-889q-vv2r" }, { "cve": "CVE-2022-23525", "notes": [ { "category": "description", "text": "Helm vulnerable to denial of service through through repository index file" } ], "product_status": { "known_affected": [ "CSAFPID-0182", "CSAFPID-0260" ] }, "title": "GHSA-53c4-hhmh-vw5q" }, { "cve": "CVE-2022-23526", "notes": [ { "category": "description", "text": "Helm vulnerable to denial of service through schema file" } ], "product_status": { "known_affected": [ "CSAFPID-0182", "CSAFPID-0260" ] }, "title": "GHSA-67fx-wx78-jx33" }, { "cve": "CVE-2022-27943", "notes": [ { "category": "description", "text": "A flaw was found in binutils, where GNU GCC is vulnerable to a denial of service caused by a stack consumption in the demangle_const() function in libiberty/rust-demangle.c. The vulnerability exists due to the application not properly controlling the consumption of internal resources. By persuading a victim to open a specially-crafted file, an attacker could cause a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0137", "CSAFPID-0138" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0137", "CSAFPID-0138" ] } ], "title": "CVE-2022-27943" }, { "cve": "CVE-2022-29458", "notes": [ { "category": "description", "text": "A segmentation fault vulnerability was found in ncurses's convert_strings() function of tinfo/read_entry.c file. This flaw occurs due to corrupted terminfo data, triggering an out-of-bounds read error." } ], "product_status": { "known_affected": [ "CSAFPID-0090" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0090" ] } ], "title": "CVE-2022-29458", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:6.2-10.20210508.el9_6.2 or later.", "product_ids": [ "CSAFPID-0090" ] } ] }, { "cve": "CVE-2022-3219", "notes": [ { "category": "description", "text": "A vulnerability was found in GnuPG. GnuPG can spin on a relatively small input by crafting a public key with thousands of signatures attached and compressed down to a few kilobytes. This issue can potentially cause a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0094" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.2, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0094" ] } ], "title": "CVE-2022-3219" }, { "cve": "CVE-2022-36055", "notes": [ { "category": "description", "text": "Helm Vulnerable to denial of service through string value parsing" } ], "product_status": { "known_affected": [ "CSAFPID-0182", "CSAFPID-0260" ] }, "title": "GHSA-7hfp-qfw3-5jxh" }, { "cve": "CVE-2022-41409", "notes": [ { "category": "description", "text": "A flaw was found in PCRE2, where it is susceptible to an integer overflow vulnerability triggered by a negative repeat value in the pcre2test subject line that causes infinite looping. This flaw allows a remote attacker to pass specially crafted data to the application, initiating an integer overflow and executing a denial of service (DoS) attack." } ], "product_status": { "known_affected": [ "CSAFPID-0032", "CSAFPID-0033" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0032", "CSAFPID-0033" ] } ], "title": "CVE-2022-41409" }, { "cve": "CVE-2022-46663", "notes": [ { "category": "description", "text": "A vulnerability was found in less. This flaw allows crafted data to result in \"less -R\" not filtering ANSI escape sequences sent to the terminal." } ], "product_status": { "known_affected": [ "CSAFPID-0016" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0016" ] } ], "title": "CVE-2022-46663", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:590-2.el9_2 or later.", "product_ids": [ "CSAFPID-0016" ] } ] }, { "cve": "CVE-2022-48303", "notes": [ { "category": "description", "text": "A flaw was found in the Tar package. When attempting to read files with old V7 tar format with a specially crafted checksum, an invalid memory read may occur. An attacker could possibly use this issue to expose sensitive information or cause a crash." } ], "product_status": { "known_affected": [ "CSAFPID-0089" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0089" ] } ], "title": "CVE-2022-48303", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:1.34-6.el9_1 or later.", "product_ids": [ "CSAFPID-0089" ] } ] }, { "cve": "CVE-2022-48624", "notes": [ { "category": "description", "text": "A flaw was found in less. The close_altfile() function in filename.c omits shell_quote calls for LESSCLOSE, a command line to invoke the optional input postprocessor. This issue could lead to an OS command injection vulnerability and arbitrary command execution on the host operating system." } ], "product_status": { "known_affected": [ "CSAFPID-0016" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.0, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0016" ] } ], "title": "CVE-2022-48624", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:590-3.el9_3 or later.", "product_ids": [ "CSAFPID-0016" ] } ] }, { "cve": "CVE-2023-22652", "notes": [ { "category": "description", "text": "A flaw was found in the libeconf library. This issue occurs when parsing a specially crafted configuration file, causing a stack-based buffer overflow, resulting in a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0014" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0014" ] } ], "title": "CVE-2023-22652", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:0.4.1-3.el9_2 or later.", "product_ids": [ "CSAFPID-0014" ] } ] }, { "cve": "CVE-2023-24056", "notes": [ { "category": "description", "text": "A flaw was found in pkgconf, where a variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. This issue may lead to a buffer overflow, which can crash the software." } ], "product_status": { "known_affected": [ "CSAFPID-0139" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0139" ] } ], "title": "CVE-2023-24056" }, { "cve": "CVE-2023-25165", "notes": [ { "category": "description", "text": "Information disclosure in helm.sh/helm/v3" } ], "product_status": { "known_affected": [ "CSAFPID-0182", "CSAFPID-0260" ] }, "title": "GO-2023-1547" }, { "cve": "CVE-2023-26484", "notes": [ { "category": "description", "text": "On a compromised node, the virt-handler service account can be used to modify all node specs" } ], "product_status": { "known_affected": [ "CSAFPID-0163", "CSAFPID-0260" ] }, "title": "GHSA-cp96-jpmq-xrr2" }, { "cve": "CVE-2023-29491", "notes": [ { "category": "description", "text": "A vulnerability was found in ncurses and occurs when used by a setuid application. This flaw allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable." } ], "product_status": { "known_affected": [ "CSAFPID-0090" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0090" ] } ], "title": "CVE-2023-29491", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:6.2-10.20210508.el9 or later.", "product_ids": [ "CSAFPID-0090" ] } ] }, { "cve": "CVE-2023-30079", "notes": [ { "category": "description", "text": "A flaw was found in the libeconf library. This issue occurs when parsing a specially crafted configuration file, causing a stack-based buffer overflow that results in a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0014" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0014" ] } ], "title": "CVE-2023-30079", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:0.4.1-3.el9_2 or later.", "product_ids": [ "CSAFPID-0014" ] } ] }, { "cve": "CVE-2023-30571", "notes": [ { "category": "description", "text": "A vulnerability was found in libarchive. This issue can cause a race condition in a multi-threaded use of archive_write_disk_header() on posix based systems, which could allow implicit directory creation with permissions 777, without sticky bit, which means any low privileged user on the system can delete and rename files inside those directories." } ], "product_status": { "known_affected": [ "CSAFPID-0091" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0091" ] } ], "title": "CVE-2023-30571" }, { "cve": "CVE-2023-31486", "notes": [ { "category": "description", "text": "A vulnerability was found in Tiny, where a Perl core module and standalone CPAN package, does not verify TLS certificates by default. Users need to explicitly enable certificate verification with the verify_SSL=>1 flag to ensure secure HTTPS connections. This oversight can potentially expose applications to man-in-the-middle (MITM) attacks, where an attacker might intercept and manipulate data transmitted between the client and server." } ], "product_status": { "known_affected": [ "CSAFPID-0092" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0092" ] } ], "title": "CVE-2023-31486", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:0.076-461.el9 or later.", "product_ids": [ "CSAFPID-0092" ] } ] }, { "cve": "CVE-2023-32636", "notes": [ { "category": "description", "text": "A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499." } ], "product_status": { "known_affected": [ "CSAFPID-0097" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.2, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0097" ] } ], "title": "CVE-2023-32636" }, { "cve": "CVE-2023-37264", "notes": [ { "category": "description", "text": "Pipelines do not validate child UIDs in github.com/tektoncd/pipeline" } ], "product_status": { "known_affected": [ "CSAFPID-0212", "CSAFPID-0213", "CSAFPID-0260" ] }, "title": "GO-2023-1901" }, { "cve": "CVE-2023-39804", "notes": [ { "category": "description", "text": "A flaw was found in tar. This issue occurs when extended attributes are processed in PAX archives, and could allow an attacker to cause an application crash, resulting in a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0089" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0089" ] } ], "title": "CVE-2023-39804" }, { "cve": "CVE-2023-4016", "notes": [ { "category": "description", "text": "A heap-based buffer overflow vulnerability was found in the procps project when handling untrusted input with the -C option. This issue may allow a user with \"ps\" utility access to write unfiltered data into the process heap, triggering an out-of-bounds write, consuming memory and causing a crash, resulting in a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0140" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0140" ] } ], "title": "CVE-2023-4016", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.3.17-13.el9 or later.", "product_ids": [ "CSAFPID-0140" ] } ] }, { "cve": "CVE-2023-4156", "notes": [ { "category": "description", "text": "A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information." } ], "product_status": { "known_affected": [ "CSAFPID-0106" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0106" ] } ], "title": "CVE-2023-4156" }, { "cve": "CVE-2023-45288", "notes": [ { "category": "description", "text": "net/http, x/net/http2: close connections when receiving too many headers" } ], "product_status": { "known_affected": [ "CSAFPID-0117", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0117", "CSAFPID-0260" ] } ], "title": "GHSA-4v7x-pqxf-cx7m", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.21.9 or later.", "product_ids": [ "CSAFPID-0117", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2023-45322", "notes": [ { "category": "description", "text": "A flaw was found in libxml2. In an out-of-memory condition or when limiting the memory allocation, processing a XML document using the HTML parser may result in a use-after-free vulnerability." } ], "product_status": { "known_affected": [ "CSAFPID-0029" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0029" ] } ], "title": "CVE-2023-45322" }, { "cve": "CVE-2023-50495", "notes": [ { "category": "description", "text": "A vulnerability was found in the NCurses package, where a segmentation fault may be triggered through _nc_wrap_entry()." } ], "product_status": { "known_affected": [ "CSAFPID-0090", "CSAFPID-0141", "CSAFPID-0142" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0090", "CSAFPID-0141", "CSAFPID-0142" ] } ], "title": "CVE-2023-50495" }, { "cve": "CVE-2023-51767", "notes": [ { "category": "description", "text": "An authentication bypass vulnerability was found in a modified version of OpenSSH. When common types of DRAM memory are used, it might allow row hammer attacks because the integer value of authenticated authpassword does not resist flips of a single bit. Exploiting a Rowhammer-style attack to flip bits in memory, forces successful authentication by setting the return code to 0." } ], "product_status": { "known_affected": [ "CSAFPID-0021" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.0, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0021" ] } ], "title": "CVE-2023-51767" }, { "cve": "CVE-2023-52425", "notes": [ { "category": "description", "text": "A flaw was found in Expat (libexpat). When parsing a large token that requires multiple buffer fills to complete, Expat has to re-parse the token from start numerous times. This process may trigger excessive resource consumption, leading to a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0017" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0017" ] } ], "title": "CVE-2023-52425", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.5.0-1.el9_3.1 or later.", "product_ids": [ "CSAFPID-0017" ] } ] }, { "cve": "CVE-2024-0232", "notes": [ { "category": "description", "text": "A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0018" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0018" ] } ], "title": "CVE-2024-0232" }, { "cve": "CVE-2024-10041", "notes": [ { "category": "description", "text": "A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications." } ], "product_status": { "known_affected": [ "CSAFPID-0015" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0015" ] } ], "title": "CVE-2024-10041", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.5.1-21.el9_5 or later.", "product_ids": [ "CSAFPID-0015" ] } ] }, { "cve": "CVE-2024-10963", "notes": [ { "category": "description", "text": "A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals." } ], "product_status": { "known_affected": [ "CSAFPID-0015" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0015" ] } ], "title": "CVE-2024-10963", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.5.1-22.el9_5 or later.", "product_ids": [ "CSAFPID-0015" ] } ] }, { "cve": "CVE-2024-11053", "notes": [ { "category": "description", "text": "A flaw was found in curl. A logic error when processing credentials from the .netrc file while performing redirects allows the transfer of credentials from the original host to the followed-to host under certain circumstances, leaking the credentials to the followed-to host." } ], "product_status": { "known_affected": [ "CSAFPID-0030", "CSAFPID-0031" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 5.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0030", "CSAFPID-0031" ] } ], "title": "CVE-2024-11053" }, { "cve": "CVE-2024-13176", "notes": [ { "category": "description", "text": "A timing side-channel vulnerability was found in OpenSSL. This vulnerability allows an attacker to recover the private key. However, measuring the timing would require local access to the signing application or a fast network connection with low latency. There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This issue can happen with significant probability only for some of the supported elliptic curves. In particular, the NIST P-521 curve is affected." } ], "product_status": { "known_affected": [ "CSAFPID-0019", "CSAFPID-0020" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0019", "CSAFPID-0020" ] } ], "title": "CVE-2024-13176" }, { "cve": "CVE-2024-22365", "notes": [ { "category": "description", "text": "A vulnerability was found in Linux PAM. An unprivileged user that is not yet in a corresponding mount namespace with ~/tmp mounted as a polyinstantiated dir can place a FIFO there, and a subsequent attempt to login as this user with `pam_namespace` configured will cause the `openat()` in `protect_dir()` to block the attempt, causing a local denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0015" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0015" ] } ], "title": "CVE-2024-22365", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.5.1-19.el9 or later.", "product_ids": [ "CSAFPID-0015" ] } ] }, { "cve": "CVE-2024-23337", "notes": [ { "category": "description", "text": "A flaw was found in jq, a command line JSON processor. An integer overflow can occur when attempting to assign a value using an array index of 2147483647 or when creating an array with 2147483647 elements, the maximum value for a 32-bit signed integer. This issue causes out-of-bounds memory access and results in a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0022" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0022" ] } ], "title": "CVE-2024-23337", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.6-17.el9_6.2 or later.", "product_ids": [ "CSAFPID-0022" ] } ] }, { "cve": "CVE-2024-25620", "notes": [ { "category": "description", "text": "Helm dependency management path traversal" } ], "product_status": { "known_affected": [ "CSAFPID-0182", "CSAFPID-0260" ] }, "title": "GHSA-v53g-5gjp-272r" }, { "cve": "CVE-2024-25621", "notes": [ { "category": "description", "text": "containerd affected by a local privilege escalation via wide permissions on CRI directory" } ], "product_status": { "known_affected": [ "CSAFPID-0012", "CSAFPID-0164", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0012", "CSAFPID-0164", "CSAFPID-0260" ] } ], "title": "GHSA-pwhc-rpq9-4c8w", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.7.29 or later.", "product_ids": [ "CSAFPID-0012", "CSAFPID-0164", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2024-26147", "notes": [ { "category": "description", "text": "Helm's Missing YAML Content Leads To Panic" } ], "product_status": { "known_affected": [ "CSAFPID-0182", "CSAFPID-0260" ] }, "title": "GHSA-r53h-jv2g-vpx6" }, { "cve": "CVE-2024-28757", "notes": [ { "category": "description", "text": "An XML Entity Expansion flaw was found in libexpat. This flaw allows an attacker to cause a denial of service when there is an isolated use of external parsers." } ], "product_status": { "known_affected": [ "CSAFPID-0017" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0017" ] } ], "title": "CVE-2024-28757", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.5.0-2.el9_4 or later.", "product_ids": [ "CSAFPID-0017" ] } ] }, { "cve": "CVE-2024-31420", "notes": [ { "category": "description", "text": "KubeVirt NULL pointer dereference flaw" } ], "product_status": { "known_affected": [ "CSAFPID-0163", "CSAFPID-0260" ] }, "title": "GHSA-vjhf-6xfr-5p9g" }, { "cve": "CVE-2024-32487", "notes": [ { "category": "description", "text": "An OS command injection flaw was found in Less. Since quoting is mishandled in filename.c, opening files with attacker-controlled file names can lead to OS command execution. Exploitation requires the LESSOPEN environment variable, which is set by default in many common cases." } ], "product_status": { "known_affected": [ "CSAFPID-0016" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "baseScore": 8.6, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0016" ] } ], "title": "CVE-2024-32487", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:590-4.el9_4 or later.", "product_ids": [ "CSAFPID-0016" ] } ] }, { "cve": "CVE-2024-33394", "notes": [ { "category": "description", "text": "kubevirt allows a local attacker to execute arbitrary code via a crafted command" } ], "product_status": { "known_affected": [ "CSAFPID-0163", "CSAFPID-0260" ] }, "title": "GHSA-4q63-mr2m-57hf" }, { "cve": "CVE-2024-40635", "notes": [ { "category": "description", "text": "containerd has an integer overflow in User ID handling" } ], "product_status": { "known_affected": [ "CSAFPID-0012", "CSAFPID-0164", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0012", "CSAFPID-0164", "CSAFPID-0260" ] } ], "title": "GHSA-265r-hfxg-fhmg", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.7.27 or later.", "product_ids": [ "CSAFPID-0012", "CSAFPID-0164", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2024-41996", "notes": [ { "category": "description", "text": "A vulnerability was found in the Diffie-Hellman Ephemeral (DHE) Key Agreement Protocol, where a malicious client can exploit the server's public key validation process. By forcing the server to use DHE and validating the order of public keys, the client can trigger expensive server-side modular exponentiation calculations. This issue results in asymmetric resource consumption, potentially leading to a denial of service (DoS) attack by overwhelming the server with computationally intensive operations." } ], "product_status": { "known_affected": [ "CSAFPID-0019", "CSAFPID-0020" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0019", "CSAFPID-0020" ] } ], "title": "CVE-2024-41996" }, { "cve": "CVE-2024-45310", "notes": [ { "category": "description", "text": "runc can be confused to create empty files/directories on the host" } ], "product_status": { "known_affected": [ "CSAFPID-0050", "CSAFPID-0207", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v4": { "version": "4.0", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/U:Green", "baseScore": 4.8, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE" } }, "products": [ "CSAFPID-0050", "CSAFPID-0207", "CSAFPID-0260" ] } ], "title": "GHSA-jfvp-7x6p-h2pv", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.1.14 or later.", "product_ids": [ "CSAFPID-0050", "CSAFPID-0207", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2024-45339", "notes": [ { "category": "description", "text": "Insecure Temporary File usage in github.com/golang/glog" } ], "product_status": { "known_affected": [ "CSAFPID-0118", "CSAFPID-0199", "CSAFPID-0200", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.1, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0118", "CSAFPID-0199", "CSAFPID-0200", "CSAFPID-0260" ] } ], "title": "GHSA-6wxm-mpqj-6jpf", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.2.4 or later.", "product_ids": [ "CSAFPID-0118", "CSAFPID-0199", "CSAFPID-0200", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2024-45490", "notes": [ { "category": "description", "text": "A flaw was found in libexpat's xmlparse.c component. This vulnerability allows an attacker to cause improper handling of XML data by providing a negative length value to the XML_ParseBuffer function." } ], "product_status": { "known_affected": [ "CSAFPID-0017" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0017" ] } ], "title": "CVE-2024-45490", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.5.0-2.el9_4.1 or later.", "product_ids": [ "CSAFPID-0017" ] } ] }, { "cve": "CVE-2024-45491", "notes": [ { "category": "description", "text": "An issue was found in libexpat’s internal dtdCopy function in xmlparse.c, It can have an integer overflow for nDefaultAtts on 32-bit platforms where UINT_MAX equals SIZE_MAX." } ], "product_status": { "known_affected": [ "CSAFPID-0017" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0017" ] } ], "title": "CVE-2024-45491", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.5.0-2.el9_4.1 or later.", "product_ids": [ "CSAFPID-0017" ] } ] }, { "cve": "CVE-2024-45492", "notes": [ { "category": "description", "text": "A flaw was found in libexpat's internal nextScaffoldPart function in xmlparse.c. It can have an integer overflow for m_groupSize on 32-bit platforms where UINT_MAX equals SIZE_MAX." } ], "product_status": { "known_affected": [ "CSAFPID-0017" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.2, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0017" ] } ], "title": "CVE-2024-45492", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.5.0-2.el9_4.1 or later.", "product_ids": [ "CSAFPID-0017" ] } ] }, { "cve": "CVE-2024-5042", "notes": [ { "category": "description", "text": "Submariner Operator sets unnecessary RBAC permissions in helm charts in github.com/submariner-io/submariner-operator" } ], "product_status": { "known_affected": [ "CSAFPID-0238", "CSAFPID-0260" ] }, "title": "GO-2024-2866" }, { "cve": "CVE-2024-50602", "notes": [ { "category": "description", "text": "A security issue was found in Expat (libexpat). A crash can be triggered in the XML_ResumeParser function due to XML_StopParser's ability to stop or suspend an unstarted parser, which can lead to a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0017" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0017" ] } ], "title": "CVE-2024-50602", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.5.0-3.el9_5.1 or later.", "product_ids": [ "CSAFPID-0017" ] } ] }, { "cve": "CVE-2024-5742", "notes": [ { "category": "description", "text": "A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink." } ], "product_status": { "known_affected": [ "CSAFPID-0113" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "baseScore": 6.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0113" ] } ], "title": "CVE-2024-5742", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:5.6.1-6.el9 or later.", "product_ids": [ "CSAFPID-0113" ] } ] }, { "cve": "CVE-2024-7264", "notes": [ { "category": "description", "text": "A flaw was found in libcurl, where libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If a syntactically incorrect field is given, the parser can use -1 for the length of the *time fraction*, leading to a `strlen()` performed on a pointer to a heap buffer area that is not purposely NULL terminated." } ], "product_status": { "known_affected": [ "CSAFPID-0030", "CSAFPID-0031" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0030", "CSAFPID-0031" ] } ], "title": "CVE-2024-7264" }, { "cve": "CVE-2024-8176", "notes": [ { "category": "description", "text": "A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage." } ], "product_status": { "known_affected": [ "CSAFPID-0017" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0017" ] } ], "title": "CVE-2024-8176", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.5.0-5.el9_6 or later.", "product_ids": [ "CSAFPID-0017" ] } ] }, { "cve": "CVE-2024-9681", "notes": [ { "category": "description", "text": "A vulnerability was found in curl. When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than intended." } ], "product_status": { "known_affected": [ "CSAFPID-0030", "CSAFPID-0031" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L", "baseScore": 3.9, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0030", "CSAFPID-0031" ] } ], "title": "CVE-2024-9681" }, { "cve": "CVE-2025-0913", "notes": [ { "category": "description", "text": "os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a dangling symlink. On Unix systems, OpenFile with O_CREATE and O_EXCL flags never follows symlinks. On Windows, when the target path was a symlink to a nonexistent location, OpenFile would create a file in that location. OpenFile now always returns an error when the O_CREATE and O_EXCL flags are both set and the target path is a symlink." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-3750", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.23.10 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-13034", "notes": [ { "category": "description", "text": "A flaw was found in curl. When configured to use public key pinning with QUIC connections and GnuTLS, and with standard certificate verification explicitly disabled, curl could bypass the intended public key check. This oversight allows a malicious server to impersonate a legitimate one, potentially leading to unauthorized access or information disclosure due to a failure in verifying the server's identity." } ], "product_status": { "known_affected": [ "CSAFPID-0030", "CSAFPID-0031" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0030", "CSAFPID-0031" ] } ], "title": "CVE-2025-13034" }, { "cve": "CVE-2025-14017", "notes": [ { "category": "description", "text": "A flaw was found in curl. When performing multi-threaded LDAPS (Lightweight Directory Access Protocol Secure) transfers, changes to Transport Layer Security (TLS) options in one thread could inadvertently apply globally, affecting other concurrent transfers. This could lead to unintended security posture changes, such as disabling certificate verification for other threads. This vulnerability can result in a security bypass, where expected security checks are not performed." } ], "product_status": { "known_affected": [ "CSAFPID-0030", "CSAFPID-0031" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "baseScore": 4.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0030", "CSAFPID-0031" ] } ], "title": "CVE-2025-14017" }, { "cve": "CVE-2025-14104", "notes": [ { "category": "description", "text": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database." } ], "product_status": { "known_affected": [ "CSAFPID-0027" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0027" ] } ], "title": "CVE-2025-14104", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.37.4-21.el9_7 or later.", "product_ids": [ "CSAFPID-0027" ] } ] }, { "cve": "CVE-2025-14524", "notes": [ { "category": "description", "text": "A flaw was found in curl. When an OAuth2 (Open Authorization) bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a different scheme like IMAP, LDAP, POP3, or SMTP, curl might incorrectly pass the bearer token to the new target host. This could lead to information disclosure, where sensitive authentication tokens are exposed to unintended recipients." } ], "product_status": { "known_affected": [ "CSAFPID-0030", "CSAFPID-0031" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0030", "CSAFPID-0031" ] } ], "title": "CVE-2025-14524" }, { "cve": "CVE-2025-14525", "notes": [ { "category": "description", "text": "KubeVirt Guest Agent DoS via Excessive Network Interface Reports" } ], "product_status": { "known_affected": [ "CSAFPID-0163", "CSAFPID-0260" ] }, "title": "GHSA-25mh-hp8x-cgrv" }, { "cve": "CVE-2025-15079", "notes": [ { "category": "description", "text": "A flaw was found in curl. When performing SSH-based transfers using SCP or SFTP, libcurl could mistakenly connect to hosts not listed in the user-specified knownhosts file. This occurs if the host is present in the libssh global knownhosts file, effectively bypassing the intended host verification. This could allow a remote attacker to connect to an untrusted host, potentially leading to information disclosure or man-in-the-middle attacks." } ], "product_status": { "known_affected": [ "CSAFPID-0030", "CSAFPID-0031" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0030", "CSAFPID-0031" ] } ], "title": "CVE-2025-15079" }, { "cve": "CVE-2025-15224", "notes": [ { "category": "description", "text": "A flaw was found in libcurl. When doing SSH-based transfers using either SCP or SFTP, and asked to do\npublic key authentication, curl would wrongly still ask and authenticate using\na locally running SSH agent." } ], "product_status": { "known_affected": [ "CSAFPID-0030", "CSAFPID-0031" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0030", "CSAFPID-0031" ] } ], "title": "CVE-2025-15224" }, { "cve": "CVE-2025-15558", "notes": [ { "category": "description", "text": "Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows" } ], "product_status": { "known_affected": [ "CSAFPID-0060", "CSAFPID-0061", "CSAFPID-0223", "CSAFPID-0224", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.0, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0060", "CSAFPID-0061", "CSAFPID-0223", "CSAFPID-0224", "CSAFPID-0260" ] } ], "title": "GHSA-p436-gjf2-799p", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 29.2.0 or later.", "product_ids": [ "CSAFPID-0060", "CSAFPID-0061", "CSAFPID-0223", "CSAFPID-0224", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-1632", "notes": [ { "category": "description", "text": "A flaw was found in the bsdunzip utility of libarchive. In affected versions, a specially crafted file may trigger a null pointer dereference. This issue can lead to an application crash or other unexpected behavior. This bug does not compromise the integrity or availability of the base system." } ], "product_status": { "known_affected": [ "CSAFPID-0091" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0091" ] } ], "title": "CVE-2025-1632" }, { "cve": "CVE-2025-21613", "notes": [ { "category": "description", "text": "go-git has an Argument Injection via the URL field" } ], "product_status": { "known_affected": [ "CSAFPID-0008", "CSAFPID-0173", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0008", "CSAFPID-0173", "CSAFPID-0260" ] } ], "title": "GHSA-v725-9546-7q7m", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 5.13.0 or later.", "product_ids": [ "CSAFPID-0008", "CSAFPID-0173", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-21614", "notes": [ { "category": "description", "text": "go-git clients vulnerable to DoS via maliciously crafted Git server replies" } ], "product_status": { "known_affected": [ "CSAFPID-0008", "CSAFPID-0173", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0008", "CSAFPID-0173", "CSAFPID-0260" ] } ], "title": "GHSA-r9px-m959-cxf4", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 5.13.0 or later.", "product_ids": [ "CSAFPID-0008", "CSAFPID-0173", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-22868", "notes": [ { "category": "description", "text": "golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability" } ], "product_status": { "known_affected": [ "CSAFPID-0043", "CSAFPID-0044", "CSAFPID-0045", "CSAFPID-0046", "CSAFPID-0195", "CSAFPID-0196", "CSAFPID-0197", "CSAFPID-0198", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0043", "CSAFPID-0044", "CSAFPID-0045", "CSAFPID-0046", "CSAFPID-0195", "CSAFPID-0196", "CSAFPID-0197", "CSAFPID-0198", "CSAFPID-0260" ] } ], "title": "GHSA-6v2p-p543-phr9", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.27.0 or later.", "product_ids": [ "CSAFPID-0043", "CSAFPID-0044", "CSAFPID-0045", "CSAFPID-0046", "CSAFPID-0195", "CSAFPID-0196", "CSAFPID-0197", "CSAFPID-0198", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-22869", "notes": [ { "category": "description", "text": "golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0176", "CSAFPID-0177", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0176", "CSAFPID-0177", "CSAFPID-0260" ] } ], "title": "GHSA-hcg3-q754-cr77", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.35.0 or later.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0176", "CSAFPID-0177", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-22870", "notes": [ { "category": "description", "text": "HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net" } ], "product_status": { "known_affected": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L", "baseScore": 4.4, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0260" ] } ], "title": "GHSA-qxp5-gwg8-xv66", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.36.0 or later.", "product_ids": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-22871", "notes": [ { "category": "description", "text": "The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 9.1, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-3563", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.23.8 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-22872", "notes": [ { "category": "description", "text": "golang.org/x/net vulnerable to Cross-site Scripting" } ], "product_status": { "known_affected": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0260" ] } ], "title": "GHSA-vvgc-356p-c3xw", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.38.0 or later.", "product_ids": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-22873", "notes": [ { "category": "description", "text": "It was possible to improperly access the parent directory of an os.Root by opening a filename ending in \"../\". For example, Root.Open(\"../\") would open the parent directory of the Root. This escape only permits opening the parent directory itself, not ancestors of the parent or files contained within the parent." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "baseScore": 3.8, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2026-4403", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.23.9 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-27113", "notes": [ { "category": "description", "text": "A flaw was found in libxml2. This vulnerability allows a NULL pointer dereference, leading to a potential crash or denial of service via a crafted XML pattern." } ], "product_status": { "known_affected": [ "CSAFPID-0029" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 3.1, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0029" ] } ], "title": "CVE-2025-27113" }, { "cve": "CVE-2025-27144", "notes": [ { "category": "description", "text": "DoS in go-jose Parsing" } ], "product_status": { "known_affected": [ "CSAFPID-0047", "CSAFPID-0201", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v4": { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "baseScore": 6.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE" } }, "products": [ "CSAFPID-0047", "CSAFPID-0201", "CSAFPID-0260" ] } ], "title": "GHSA-c6gw-w398-hv78", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 3.0.4 or later.", "product_ids": [ "CSAFPID-0047", "CSAFPID-0201", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-30204", "notes": [ { "category": "description", "text": "jwt-go allows excessive memory allocation during header parsing" } ], "product_status": { "known_affected": [ "CSAFPID-0058", "CSAFPID-0059", "CSAFPID-0221", "CSAFPID-0222", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v4": { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "baseScore": 8.7, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE" } }, "products": [ "CSAFPID-0058", "CSAFPID-0059", "CSAFPID-0221", "CSAFPID-0222", "CSAFPID-0260" ] } ], "title": "GHSA-mh63-6h87-95cp", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 4.5.2 or later.", "product_ids": [ "CSAFPID-0058", "CSAFPID-0059", "CSAFPID-0221", "CSAFPID-0222", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-30258", "notes": [ { "category": "description", "text": "A flaw was found in GnuPG. In affected versions, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, leading to a verification denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0094" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L", "baseScore": 2.7, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0094" ] } ], "title": "CVE-2025-30258" }, { "cve": "CVE-2025-31133", "notes": [ { "category": "description", "text": "runc container escape via \"masked path\" abuse due to mount race conditions" } ], "product_status": { "known_affected": [ "CSAFPID-0050", "CSAFPID-0207", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0050", "CSAFPID-0207", "CSAFPID-0260" ] } ], "title": "GHSA-9493-h29p-rfm2", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.2.8 or later.", "product_ids": [ "CSAFPID-0050", "CSAFPID-0207", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-32386", "notes": [ { "category": "description", "text": "Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination" } ], "product_status": { "known_affected": [ "CSAFPID-0182", "CSAFPID-0260" ] }, "title": "GHSA-4hfp-h4cw-hj8p" }, { "cve": "CVE-2025-32387", "notes": [ { "category": "description", "text": "Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow" } ], "product_status": { "known_affected": [ "CSAFPID-0182", "CSAFPID-0260" ] }, "title": "GHSA-5xqw-8hwv-wg92" }, { "cve": "CVE-2025-32728", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSH. In affected versions of sshd, the DisableForwarding directive does not fully adhere to the intended functionality as documented. Specifically, it fails to disable X11 and agent forwarding, which may allow unintended access under certain configurations." } ], "product_status": { "known_affected": [ "CSAFPID-0021" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0021" ] } ], "title": "CVE-2025-32728" }, { "cve": "CVE-2025-3360", "notes": [ { "category": "description", "text": "A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function." } ], "product_status": { "known_affected": [ "CSAFPID-0097" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.7, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0097" ] } ], "title": "CVE-2025-3360" }, { "cve": "CVE-2025-45582", "notes": [ { "category": "description", "text": "A flaw was found in GNU Tar. An attacker could exploit this vulnerability by providing two specially crafted TAR archives, if those archives were extracted in the same directory. The first archive contains a symbolic link that points to a critical directory. The second archive, when extracted, uses this symbolic link to overwrite sensitive files on the system, bypassing existing directory traversal protections. This could lead to unauthorized file modification or, in some cases, privilege escalation." } ], "product_status": { "known_affected": [ "CSAFPID-0089" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "baseScore": 5.6, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0089" ] } ], "title": "CVE-2025-45582", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:1.34-9.el9_7 or later.", "product_ids": [ "CSAFPID-0089" ] } ] }, { "cve": "CVE-2025-4673", "notes": [ { "category": "description", "text": "Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-3751", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.23.10 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-47906", "notes": [ { "category": "description", "text": "If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath (\"\", \".\", and \"..\"), can result in the binaries listed in the PATH being unexpectedly returned." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-3956", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.23.12 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-47907", "notes": [ { "category": "description", "text": "Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L", "baseScore": 7.0, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-3849", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.23.12 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-47911", "notes": [ { "category": "description", "text": "The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content." } ], "product_status": { "known_affected": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0260" ] } ], "title": "GO-2026-4440", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.45.0 or later.", "product_ids": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-47912", "notes": [ { "category": "description", "text": "The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: \"http://[::1]/\". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-4010", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.8 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-47913", "notes": [ { "category": "description", "text": "SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process." } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0176", "CSAFPID-0177", "CSAFPID-0178", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0176", "CSAFPID-0177", "CSAFPID-0178", "CSAFPID-0260" ] } ], "title": "GO-2025-4116", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.43.0 or later.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0176", "CSAFPID-0177", "CSAFPID-0178", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-47914", "notes": [ { "category": "description", "text": "golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0176", "CSAFPID-0177", "CSAFPID-0178", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0176", "CSAFPID-0177", "CSAFPID-0178", "CSAFPID-0260" ] } ], "title": "GHSA-f6x5-jh6r-wrfv", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.45.0 or later.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0176", "CSAFPID-0177", "CSAFPID-0178", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-48060", "notes": [ { "category": "description", "text": "A flaw was found in jq, a command line JSON processor. A specially crafted input can cause a heap-based buffer over-read when formatting an empty string because it was not properly null-terminated, causing a crash and resulting in a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0022" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0022" ] } ], "title": "CVE-2025-48060", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.6-17.el9_6.2 or later.", "product_ids": [ "CSAFPID-0022" ] } ] }, { "cve": "CVE-2025-48386", "notes": [ { "category": "description", "text": "A credential handling flaw has been discovered in git. The wincred credential helper uses a static buffer (target) as a unique key for storing and comparing against internal storage. This credential helper does not properly bounds check the available space remaining in the buffer before appending to it with wcsncat(), which can lead to buffer overflows." } ], "product_status": { "known_affected": [ "CSAFPID-0093" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "baseScore": 6.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0093" ] } ], "title": "CVE-2025-48386" }, { "cve": "CVE-2025-52565", "notes": [ { "category": "description", "text": "runc container escape with malicious config due to /dev/console mount and related races" } ], "product_status": { "known_affected": [ "CSAFPID-0050", "CSAFPID-0207", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0050", "CSAFPID-0207", "CSAFPID-0260" ] } ], "title": "GHSA-qw9x-cqr3-wc7r", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.2.8 or later.", "product_ids": [ "CSAFPID-0050", "CSAFPID-0207", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-52881", "notes": [ { "category": "description", "text": "runc container escape and denial of service due to arbitrary write gadgets and procfs write redirects" } ], "product_status": { "known_affected": [ "CSAFPID-0050", "CSAFPID-0052", "CSAFPID-0207", "CSAFPID-0209", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0050", "CSAFPID-0052", "CSAFPID-0207", "CSAFPID-0209", "CSAFPID-0260" ] } ], "title": "GHSA-cgrx-mc8f-2prm", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.2.8 or later.", "product_ids": [ "CSAFPID-0050", "CSAFPID-0052", "CSAFPID-0207", "CSAFPID-0209", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-53547", "notes": [ { "category": "description", "text": "Helm vulnerable to Code Injection through malicious chart.yaml content" } ], "product_status": { "known_affected": [ "CSAFPID-0182", "CSAFPID-0260" ] }, "title": "GHSA-557j-xg8c-q2mm" }, { "cve": "CVE-2025-54410", "notes": [ { "category": "description", "text": "Moby firewalld reload removes bridge network isolation" } ], "product_status": { "known_affected": [ "CSAFPID-0067", "CSAFPID-0068", "CSAFPID-0184", "CSAFPID-0185", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "baseScore": 5.2, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0067", "CSAFPID-0068", "CSAFPID-0184", "CSAFPID-0185", "CSAFPID-0260" ] } ], "title": "GHSA-4vq8-7jfc-9cvp", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 25.0.13 or later.", "product_ids": [ "CSAFPID-0067", "CSAFPID-0068", "CSAFPID-0184", "CSAFPID-0185", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-55198", "notes": [ { "category": "description", "text": "Helm May Panic Due To Incorrect YAML Content" } ], "product_status": { "known_affected": [ "CSAFPID-0182", "CSAFPID-0260" ] }, "title": "GHSA-f9f8-9pmf-xv68" }, { "cve": "CVE-2025-55199", "notes": [ { "category": "description", "text": "Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion" } ], "product_status": { "known_affected": [ "CSAFPID-0182", "CSAFPID-0260" ] }, "title": "GHSA-9h84-qmv7-982p" }, { "cve": "CVE-2025-58058", "notes": [ { "category": "description", "text": "github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives" } ], "product_status": { "known_affected": [ "CSAFPID-0128", "CSAFPID-0218", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0128", "CSAFPID-0218", "CSAFPID-0260" ] } ], "title": "GHSA-jc7w-c686-c4v9", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.5.15 or later.", "product_ids": [ "CSAFPID-0128", "CSAFPID-0218", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-58181", "notes": [ { "category": "description", "text": "golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0176", "CSAFPID-0177", "CSAFPID-0178", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0176", "CSAFPID-0177", "CSAFPID-0178", "CSAFPID-0260" ] } ], "title": "GHSA-j5w8-q4qc-rx2x", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.45.0 or later.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0176", "CSAFPID-0177", "CSAFPID-0178", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-58183", "notes": [ { "category": "description", "text": "tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-4014", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.8 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-58185", "notes": [ { "category": "description", "text": "Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-4011", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.8 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-58186", "notes": [ { "category": "description", "text": "Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as \"a=;\", an attacker can make an HTTP server allocate a large amount of structs, causing large memory consumption." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-4012", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.8 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-58187", "notes": [ { "category": "description", "text": "Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate.\n\nThis affects programs which validate arbitrary certificate chains." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-4007", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.9 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-58188", "notes": [ { "category": "description", "text": "Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method.\n\nThis affects programs which validate arbitrary certificate chains." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-4013", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.8 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-58189", "notes": [ { "category": "description", "text": "When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-4008", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.8 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-58190", "notes": [ { "category": "description", "text": "The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content." } ], "product_status": { "known_affected": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0260" ] } ], "title": "GO-2026-4441", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.45.0 or later.", "product_ids": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-5915", "notes": [ { "category": "description", "text": "A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions." } ], "product_status": { "known_affected": [ "CSAFPID-0091" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H", "baseScore": 6.6, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0091" ] } ], "title": "CVE-2025-5915" }, { "cve": "CVE-2025-5916", "notes": [ { "category": "description", "text": "A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within applications that process such archives using libarchive. This bug affects libarchive versions prior to 3.8.0." } ], "product_status": { "known_affected": [ "CSAFPID-0091" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L", "baseScore": 3.9, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0091" ] } ], "title": "CVE-2025-5916" }, { "cve": "CVE-2025-5917", "notes": [ { "category": "description", "text": "A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable program behavior, crashes, or in specific circumstances, could be leveraged as a building block for more sophisticated exploitation. This bug affects libarchive versions prior to 3.8.0." } ], "product_status": { "known_affected": [ "CSAFPID-0091" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "baseScore": 2.8, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0091" ] } ], "title": "CVE-2025-5917" }, { "cve": "CVE-2025-5918", "notes": [ { "category": "description", "text": "A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition." } ], "product_status": { "known_affected": [ "CSAFPID-0091" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L", "baseScore": 3.9, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0091" ] } ], "title": "CVE-2025-5918" }, { "cve": "CVE-2025-59375", "notes": [ { "category": "description", "text": "A memory amplification vulnerability in libexpat allows attackers to trigger excessive dynamic memory allocations by submitting specially crafted XML input. A small input (~250 KiB) can cause the parser to allocate hundreds of megabytes, leading to denial-of-service (DoS) through memory exhaustion." } ], "product_status": { "known_affected": [ "CSAFPID-0017" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0017" ] } ], "title": "CVE-2025-59375", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.5.0-5.el9_7.1 or later.", "product_ids": [ "CSAFPID-0017" ] } ] }, { "cve": "CVE-2025-6020", "notes": [ { "category": "description", "text": "A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions." } ], "product_status": { "known_affected": [ "CSAFPID-0015" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0015" ] } ], "title": "CVE-2025-6020", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.5.1-26.el9_6 or later.", "product_ids": [ "CSAFPID-0015" ] } ] }, { "cve": "CVE-2025-60753", "notes": [ { "category": "description", "text": "A vulnerability in apply_substitution() function in libarchive's bsdtar allows crafted -s substitution rules to repeatedly match a zero-length substring and append replacements without advancing the input pointer. When the rule uses the global /g flag (or an explicitly empty pattern), this leads to unbounded output allocation and eventual process OOM (Denial of Service). Upgrade to libarchive 3.8.1 or apply a patch that prevents zero-length match loops or rejects empty patterns." } ], "product_status": { "known_affected": [ "CSAFPID-0091" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0091" ] } ], "title": "CVE-2025-60753" }, { "cve": "CVE-2025-61723", "notes": [ { "category": "description", "text": "The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input.\n\nThis affects programs which parse untrusted PEM inputs." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-4009", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.8 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-61724", "notes": [ { "category": "description", "text": "The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-4015", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.8 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-61725", "notes": [ { "category": "description", "text": "The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-4006", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.8 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-61726", "notes": [ { "category": "description", "text": "The net/url package does not set a limit on the number of query parameters in a query.\n\nWhile the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ], "title": "GO-2026-4341", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.12 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-61727", "notes": [ { "category": "description", "text": "An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-4175", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.11 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-61728", "notes": [ { "category": "description", "text": "archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ], "title": "GO-2026-4342", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.12 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-61729", "notes": [ { "category": "description", "text": "Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ], "title": "GO-2025-4155", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.11 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-61730", "notes": [ { "category": "description", "text": "During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instance the Client Hello and Encrypted Extensions messages), the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosure if a network-local attacker can inject messages during the handshake." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ], "title": "GO-2026-4340", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.12 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-64118", "notes": [ { "category": "description", "text": "A flaw was found in node-tar, a Tar utility for Node.js. This vulnerability allows a local attacker to potentially disclose sensitive information. When the .t (or .list) function is used with { sync: true } to read tar entry contents, and the tar file is concurrently modified on disk to a smaller size, the function may return uninitialized memory contents. This could lead to the exposure of arbitrary data." } ], "product_status": { "known_affected": [ "CSAFPID-0089" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0089" ] } ], "title": "CVE-2025-64118" }, { "cve": "CVE-2025-64324", "notes": [ { "category": "description", "text": "KubeVirt Vulnerable to Arbitrary Host File Read and Write" } ], "product_status": { "known_affected": [ "CSAFPID-0163", "CSAFPID-0260" ] }, "title": "GHSA-46xp-26xh-hpqh" }, { "cve": "CVE-2025-64329", "notes": [ { "category": "description", "text": "containerd CRI server: Host memory exhaustion through Attach goroutine leak" } ], "product_status": { "known_affected": [ "CSAFPID-0012", "CSAFPID-0164", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v4": { "version": "4.0", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "baseScore": 6.9, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE" } }, "products": [ "CSAFPID-0012", "CSAFPID-0164", "CSAFPID-0260" ] } ], "title": "GHSA-m6hq-p25p-ffr2", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.7.29 or later.", "product_ids": [ "CSAFPID-0012", "CSAFPID-0164", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-64432", "notes": [ { "category": "description", "text": "KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer" } ], "product_status": { "known_affected": [ "CSAFPID-0163", "CSAFPID-0260" ] }, "title": "GHSA-38jw-g2qx-4286" }, { "cve": "CVE-2025-64433", "notes": [ { "category": "description", "text": "KubeVirt Arbitrary Container File Read" } ], "product_status": { "known_affected": [ "CSAFPID-0163", "CSAFPID-0260" ] }, "title": "GHSA-qw6q-3pgr-5cwq" }, { "cve": "CVE-2025-64434", "notes": [ { "category": "description", "text": "KubeVirt's Improper TLS Certificate Management Handling Allows API Identity Spoofing" } ], "product_status": { "known_affected": [ "CSAFPID-0163", "CSAFPID-0260" ] }, "title": "GHSA-ggp9-c99x-54gp" }, { "cve": "CVE-2025-64435", "notes": [ { "category": "description", "text": "KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation" } ], "product_status": { "known_affected": [ "CSAFPID-0163", "CSAFPID-0260" ] }, "title": "GHSA-9m94-w2vq-hcf9" }, { "cve": "CVE-2025-64436", "notes": [ { "category": "description", "text": "KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes" } ], "product_status": { "known_affected": [ "CSAFPID-0163", "CSAFPID-0260" ] }, "title": "GHSA-7xgm-5prm-v5gc" }, { "cve": "CVE-2025-64437", "notes": [ { "category": "description", "text": "KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes" } ], "product_status": { "known_affected": [ "CSAFPID-0163", "CSAFPID-0260" ] }, "title": "GHSA-2r4r-5x78-mvqf" }, { "cve": "CVE-2025-66382", "notes": [ { "category": "description", "text": "A flaw was found in libexpat. This vulnerability allows a denial of service (DoS) by processing a crafted file with an approximate size of 2 MiB, leading to dozens of seconds of processing time." } ], "product_status": { "known_affected": [ "CSAFPID-0017" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 2.9, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0017" ] } ], "title": "CVE-2025-66382" }, { "cve": "CVE-2025-66506", "notes": [ { "category": "description", "text": "Fulcio allocates excessive memory during token parsing" } ], "product_status": { "known_affected": [ "CSAFPID-0055", "CSAFPID-0056", "CSAFPID-0186", "CSAFPID-0187", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0055", "CSAFPID-0056", "CSAFPID-0186", "CSAFPID-0187", "CSAFPID-0260" ] } ], "title": "GHSA-f83f-xpx7-ffpw", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.8.3 or later.", "product_ids": [ "CSAFPID-0055", "CSAFPID-0056", "CSAFPID-0186", "CSAFPID-0187", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-66564", "notes": [ { "category": "description", "text": "Sigstore Timestamp Authority allocates excessive memory during request parsing" } ], "product_status": { "known_affected": [ "CSAFPID-0042", "CSAFPID-0183", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0042", "CSAFPID-0183", "CSAFPID-0260" ] } ], "title": "GHSA-4qg8-fj49-pxjh", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2.0.3 or later.", "product_ids": [ "CSAFPID-0042", "CSAFPID-0183", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-68121", "notes": [ { "category": "description", "text": "During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10.0, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ], "title": "GO-2026-4337", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.24.13 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-68972", "notes": [ { "category": "description", "text": "A flaw was found in GnuPG. An adversary can exploit this vulnerability by crafting a signed message that includes a form feed character (\\f) at the end of a plaintext line. This allows the adversary to append additional, unsigned text to the message while the signature verification still reports success. This issue leads to an integrity bypass, potentially enabling the spoofing of signed communications." } ], "product_status": { "known_affected": [ "CSAFPID-0094" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N", "baseScore": 5.9, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0094" ] } ], "title": "CVE-2025-68972" }, { "cve": "CVE-2025-69725", "notes": [ { "category": "description", "text": "Open redirect vulnerability in the RedirectSlashes middleware in github.com/go-chi/chi" } ], "product_status": { "known_affected": [ "CSAFPID-0152", "CSAFPID-0239", "CSAFPID-0260" ] }, "title": "GO-2026-4316" }, { "cve": "CVE-2025-7039", "notes": [ { "category": "description", "text": "A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations." } ], "product_status": { "known_affected": [ "CSAFPID-0097" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "baseScore": 3.7, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0097" ] } ], "title": "CVE-2025-7039" }, { "cve": "CVE-2025-70873", "notes": [ { "category": "description", "text": "A flaw was found in SQLite. This information disclosure vulnerability exists within the zipfile extension, specifically in the zipfileInflate function. A remote attacker could exploit this by providing a specially crafted ZIP file. Successful exploitation could lead to the disclosure of sensitive heap memory information." } ], "product_status": { "known_affected": [ "CSAFPID-0018" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0018" ] } ], "title": "CVE-2025-70873" }, { "cve": "CVE-2025-71405", "notes": [ { "category": "description", "text": "chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes" } ], "product_status": { "known_affected": [ "CSAFPID-0131", "CSAFPID-0231", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v4": { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N", "baseScore": 5.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE" } }, "products": [ "CSAFPID-0131", "CSAFPID-0231", "CSAFPID-0260" ] } ], "title": "GHSA-vrw8-fxc6-2r93", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 5.2.2 or later.", "product_ids": [ "CSAFPID-0131", "CSAFPID-0231", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-8556", "notes": [ { "category": "description", "text": "CIRCL-Fourq: Missing and wrong validation can lead to incorrect results" } ], "product_status": { "known_affected": [ "CSAFPID-0146", "CSAFPID-0172", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 3.7, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0146", "CSAFPID-0172", "CSAFPID-0260" ] } ], "title": "GHSA-2x5j-vhc8-9cwm", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.6.1 or later.", "product_ids": [ "CSAFPID-0146", "CSAFPID-0172", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2025-8941", "notes": [ { "category": "description", "text": "A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a \"complete\" fix for CVE-2025-6020." } ], "product_status": { "known_affected": [ "CSAFPID-0015" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0015" ] } ], "title": "CVE-2025-8941", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.5.1-26.el9_6 or later.", "product_ids": [ "CSAFPID-0015" ] } ] }, { "cve": "CVE-2025-9232", "notes": [ { "category": "description", "text": "A flaw was found in the OpenSSL HTTP client API no_proxy handling. This vulnerability allows an application level denial of service (application crash) via an attacker-controlled IPv6 URL when the no_proxy environment variable is set." } ], "product_status": { "known_affected": [ "CSAFPID-0019", "CSAFPID-0020" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 3.1, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0019", "CSAFPID-0020" ] } ], "title": "CVE-2025-9232" }, { "cve": "CVE-2025-9403", "notes": [ { "category": "description", "text": "A vulnerability has been identified in the jq JSON processor where malformed JSON input containing invalid Unicode escape sequences can trigger an assertion failure in the test suite’s parsing consistency checks. This flaw arises from inconsistencies between expected and reparsed JSON values during serialization and deserialization, potentially allowing an attacker to exploit the issue by supplying specially crafted JSON data to cause abnormal termination or denial of service during test execution, highlighting weaknesses in jq’s parsing reliability." } ], "product_status": { "known_affected": [ "CSAFPID-0022" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0022" ] } ], "title": "CVE-2025-9403" }, { "cve": "CVE-2026-0988", "notes": [ { "category": "description", "text": "A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS)." } ], "product_status": { "known_affected": [ "CSAFPID-0097" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.7, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0097" ] } ], "title": "CVE-2026-0988" }, { "cve": "CVE-2026-0989", "notes": [ { "category": "description", "text": "A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk." } ], "product_status": { "known_affected": [ "CSAFPID-0029" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.7, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0029" ] } ], "title": "CVE-2026-0989" }, { "cve": "CVE-2026-0990", "notes": [ { "category": "description", "text": "A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a specially crafted XML catalog, leading to infinite recursion and call stack exhaustion. This ultimately results in a segmentation fault, causing a Denial of Service (DoS) by crashing affected applications." } ], "product_status": { "known_affected": [ "CSAFPID-0029" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0029" ] } ], "title": "CVE-2026-0990" }, { "cve": "CVE-2026-0992", "notes": [ { "category": "description", "text": "A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition." } ], "product_status": { "known_affected": [ "CSAFPID-0029" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 2.9, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0029" ] } ], "title": "CVE-2026-0992" }, { "cve": "CVE-2026-11822", "notes": [ { "category": "description", "text": "A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed against such a database, an attacker can cause process crashes, memory exhaustion, or achieve arbitrary code execution, potentially compromising the system." } ], "product_status": { "known_affected": [ "CSAFPID-0018" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0018" ] } ], "title": "CVE-2026-11822", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.34.1-11.el9_8 or later.", "product_ids": [ "CSAFPID-0018" ] } ] }, { "cve": "CVE-2026-11824", "notes": [ { "category": "description", "text": "A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processing. Successful exploitation of this vulnerability can lead to a crash of the application or allow for arbitrary code execution." } ], "product_status": { "known_affected": [ "CSAFPID-0018" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0018" ] } ], "title": "CVE-2026-11824", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.34.1-11.el9_8 or later.", "product_ids": [ "CSAFPID-0018" ] } ] }, { "cve": "CVE-2026-11850", "notes": [ { "category": "description", "text": "An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. The function performs an unsigned subtraction (bv_len - 2) without a prior bounds check. When bv_len is 0 or 1, the subtraction wraps to a large value which is then truncated to uint16_t, yielding 0xFFFE (65534) or 0xFFFF (65535). The subsequent malloc succeeds and memcpy reads up to 65534 bytes from a 0-1 byte buffer, resulting in a heap out-of-bounds read.\nThe attack vector involves a malicious or compromised LDAP KDB backend returning a krbExtraData attribute with bv_len < 2, triggering the underflow when the KDC or kadmind reads principal data." } ], "product_status": { "known_affected": [ "CSAFPID-0095" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H", "baseScore": 5.0, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0095" ] } ], "title": "CVE-2026-11850" }, { "cve": "CVE-2026-11856", "notes": [ { "category": "description", "text": "A flaw was found in curl. When `libcurl` performs a transfer to an HTTP origin using Digest authentication and then reuses the same connection handle for a subsequent transfer to a different origin, it may incorrectly send the authentication header intended for the first origin to the second. This could lead to unintended information disclosure, potentially allowing an attacker to gain unauthorized access to sensitive data." } ], "product_status": { "known_affected": [ "CSAFPID-0030", "CSAFPID-0031" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0030", "CSAFPID-0031" ] } ], "title": "CVE-2026-11856" }, { "cve": "CVE-2026-11979", "notes": [ { "category": "description", "text": "A flaw was found in libxml2, specifically within the xmlcatalog utility when operating in shell mode. An attacker can exploit multiple stack-based buffer overflows by providing an excessively long input line. This leads to memory corruption, which may cause the application to crash or potentially allow the attacker to execute arbitrary code within the context of the xmlcatalog process." } ], "product_status": { "known_affected": [ "CSAFPID-0029" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L", "baseScore": 4.8, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0029" ] } ], "title": "CVE-2026-11979", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.9.13-14.el9_8.4 or later.", "product_ids": [ "CSAFPID-0029" ] } ] }, { "cve": "CVE-2026-12087", "notes": [ { "category": "description", "text": "A flaw was found in the `perl-Socket` component. The `pack_ip_mreq_source()` function, which handles network socket operations, contains an out-of-bounds heap read vulnerability. An attacker providing a specially crafted input can cause the system to read beyond the intended memory buffer, potentially leading to information disclosure from adjacent memory regions." } ], "product_status": { "known_affected": [ "CSAFPID-0096" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0096" ] } ], "title": "CVE-2026-12087" }, { "cve": "CVE-2026-1229", "notes": [ { "category": "description", "text": "CIRCL has an incorrect calculation in secp384r1 CombinedMult" } ], "product_status": { "known_affected": [ "CSAFPID-0146", "CSAFPID-0147", "CSAFPID-0172", "CSAFPID-0230", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0146", "CSAFPID-0147", "CSAFPID-0172", "CSAFPID-0230", "CSAFPID-0260" ] } ], "title": "GHSA-q9hv-hpm4-hj6x", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.6.3 or later.", "product_ids": [ "CSAFPID-0146", "CSAFPID-0147", "CSAFPID-0172", "CSAFPID-0230", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-12610", "notes": [ { "category": "description", "text": "A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit." } ], "product_status": { "known_affected": [ "CSAFPID-0015" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 6.4, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0015" ] } ], "title": "CVE-2026-12610" }, { "cve": "CVE-2026-13595", "notes": [ { "category": "description", "text": "A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0023", "CSAFPID-0024", "CSAFPID-0025", "CSAFPID-0026", "CSAFPID-0027" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0023", "CSAFPID-0024", "CSAFPID-0025", "CSAFPID-0026", "CSAFPID-0027" ] } ], "title": "CVE-2026-13595" }, { "cve": "CVE-2026-14456", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSL. A remote attacker could exploit this by sending a large number of QUIC Initial packets to an OpenSSL QUIC server. This can cause the server to allocate and queue new incoming channels without limit, leading to unbounded memory growth. The excessive memory consumption can result in a Denial of Service (DoS) condition, making the QUIC listener unavailable." } ], "product_status": { "known_affected": [ "CSAFPID-0019", "CSAFPID-0020" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0019", "CSAFPID-0020" ] } ], "title": "CVE-2026-14456", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.5.8-1.el9_8 or later.", "product_ids": [ "CSAFPID-0019", "CSAFPID-0020" ] } ] }, { "cve": "CVE-2026-14457", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSL. In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, where only the private key (with no certificate) is configured, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted \"signature_algorithms_cert\" TLS extension. This issue results in a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0019", "CSAFPID-0020" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0019", "CSAFPID-0020" ] } ], "title": "CVE-2026-14457", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.5.8-1.el9_8 or later.", "product_ids": [ "CSAFPID-0019", "CSAFPID-0020" ] } ] }, { "cve": "CVE-2026-1484", "notes": [ { "category": "description", "text": "A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrusted or extremely large Base64 input using GLib may crash or behave unpredictably." } ], "product_status": { "known_affected": [ "CSAFPID-0097" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L", "baseScore": 4.2, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0097" ] } ], "title": "CVE-2026-1484" }, { "cve": "CVE-2026-1485", "notes": [ { "category": "description", "text": "A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow and out-of-bounds memory access. Exploitation requires a local user to install or process a specially crafted treemagic file, which can lead to local denial of service or application instability." } ], "product_status": { "known_affected": [ "CSAFPID-0097" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "baseScore": 2.8, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0097" ] } ], "title": "CVE-2026-1485" }, { "cve": "CVE-2026-1489", "notes": [ { "category": "description", "text": "A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory corruption. By processing specially crafted and extremely large Unicode strings, an attacker could trigger an undersized memory allocation, resulting in out-of-bounds writes. This could cause applications utilizing GLib for string conversion to crash or become unstable." } ], "product_status": { "known_affected": [ "CSAFPID-0097" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "baseScore": 5.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0097" ] } ], "title": "CVE-2026-1489" }, { "cve": "CVE-2026-15028", "notes": [ { "category": "description", "text": "A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during the parsing of a PAX extended header containing a malformed SUN.holesdata sparse-file attribute. Successful exploitation could lead to a denial of service, making the system unavailable, or potentially allow for arbitrary code execution, giving the attacker control over the affected system." } ], "product_status": { "known_affected": [ "CSAFPID-0091" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L", "baseScore": 3.9, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0091" ] } ], "title": "CVE-2026-15028" }, { "cve": "CVE-2026-15059", "notes": [ { "category": "description", "text": "A flaw was found in systemd-oomd. Local unprivileged users can exploit a missing path traversal validation in the systemd-oomd Inter-Process Communication (IPC) Application Programming Interface (API). This vulnerability allows them to terminate arbitrary local processes, leading to a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0098" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0098" ] } ], "title": "CVE-2026-15059" }, { "cve": "CVE-2026-15588", "notes": [ { "category": "description", "text": "A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang." } ], "product_status": { "known_affected": [ "CSAFPID-0097" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0097" ] } ], "title": "CVE-2026-15588", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.68.4-19.el9_8.9 or later.", "product_ids": [ "CSAFPID-0097" ] } ] }, { "cve": "CVE-2026-16118", "notes": [ { "category": "description", "text": "A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption." } ], "product_status": { "known_affected": [ "CSAFPID-0097" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "baseScore": 7.1, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0097" ] } ], "title": "CVE-2026-16118", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.68.4-19.el9_8.10 or later.", "product_ids": [ "CSAFPID-0097" ] } ] }, { "cve": "CVE-2026-1757", "notes": [ { "category": "description", "text": "A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to free the allocated buffer. Repeating this action causes memory to continuously accumulate. Over time, this can exhaust system memory and terminate the xmllint process, creating a denial-of-service condition on the local system." } ], "product_status": { "known_affected": [ "CSAFPID-0029" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.2, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0029" ] } ], "title": "CVE-2026-1757" }, { "cve": "CVE-2026-18374", "notes": [ { "category": "description", "text": "A flaw was found in the GNU C Library (glibc). This vulnerability could allow an attacker with local access to trigger a heap buffer overflow by manipulating how the `fopen` function handles certain input. This could lead to minor disruptions in system operations or limited access to sensitive information." } ], "product_status": { "known_affected": [ "CSAFPID-0099", "CSAFPID-0100", "CSAFPID-0101" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "baseScore": 4.9, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0099", "CSAFPID-0100", "CSAFPID-0101" ] } ], "title": "CVE-2026-18374" }, { "cve": "CVE-2026-18477", "notes": [ { "category": "description", "text": "A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During restoration, files or directories may be created, renamed or overwritten outside the intended extraction directory. This could lead to unauthorized file modification or, in some cases, privilege escalation. Exploitation does not require the attacker to modify or craft the archive, and standard backup and restore workflows—including extracting into a newly created directory without using the -P option do not mitigate the issue." } ], "product_status": { "known_affected": [ "CSAFPID-0089" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N", "baseScore": 4.4, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0089" ] } ], "title": "CVE-2026-18477", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:1.34-13.el9_8 or later.", "product_ids": [ "CSAFPID-0089" ] } ] }, { "cve": "CVE-2026-18508", "notes": [ { "category": "description", "text": "A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary and, when combined with a preexisting symbolic link under the working directory, may allow writing outside that boundary during a single extraction." } ], "product_status": { "known_affected": [ "CSAFPID-0089" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "baseScore": 4.4, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0089" ] } ], "title": "CVE-2026-18508", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:1.34-13.el9_8 or later.", "product_ids": [ "CSAFPID-0089" ] } ] }, { "cve": "CVE-2026-18739", "notes": [ { "category": "description", "text": "A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacker to execute arbitrary code if the host application then unsafely processes the altered data." } ], "product_status": { "known_affected": [ "CSAFPID-0143" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "baseScore": 2.5, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0143" ] } ], "title": "CVE-2026-18739" }, { "cve": "CVE-2026-18743", "notes": [ { "category": "description", "text": "A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful exploitation could result in heap metadata corruption, potentially causing the affected process to become unavailable (denial of service)." } ], "product_status": { "known_affected": [ "CSAFPID-0143" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "baseScore": 2.5, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0143" ] } ], "title": "CVE-2026-18743" }, { "cve": "CVE-2026-18798", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSL. A malformed INITIAL packet with an invalid DCID (destination connection ID) can cause the QUIC server to double free the QRX object. This issue leads to memory corruption, causing the termination of the QUIC server process and resulting in a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0019", "CSAFPID-0020" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0019", "CSAFPID-0020" ] } ], "title": "CVE-2026-18798", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.5.8-1.el9_8 or later.", "product_ids": [ "CSAFPID-0019", "CSAFPID-0020" ] } ] }, { "cve": "CVE-2026-18839", "notes": [ { "category": "description", "text": "An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of service of the affected application." } ], "product_status": { "known_affected": [ "CSAFPID-0143" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L", "baseScore": 2.2, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0143" ] } ], "title": "CVE-2026-18839" }, { "cve": "CVE-2026-18924", "notes": [ { "category": "description", "text": "A flaw was found in libcurl. When libcurl handles HTTP/2 Server Push streams and the parent handle shares connections, a use-after-free vulnerability can occur during the cleanup process. This could lead to application crashes, resulting in a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0030", "CSAFPID-0031" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.7, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0030", "CSAFPID-0031" ] } ], "title": "CVE-2026-18924" }, { "cve": "CVE-2026-19542", "notes": [ { "category": "description", "text": "A flaw was found in glibc. An out-of-bounds array write vulnerability exists within the `tdelete` function. This issue occurs due to incorrect management of array sizes, which can lead to memory corruption. A local attacker with low privileges could potentially exploit this to cause a denial of service or disclose sensitive information." } ], "product_status": { "known_affected": [ "CSAFPID-0099", "CSAFPID-0100", "CSAFPID-0101" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L", "baseScore": 4.2, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0099", "CSAFPID-0100", "CSAFPID-0101" ] } ], "title": "CVE-2026-19542" }, { "cve": "CVE-2026-1965", "notes": [ { "category": "description", "text": "A flaw was found in curl. When an application uses libcurl to make multiple Negotiate-authenticated HTTP or HTTPS requests to the same server with different credentials, libcurl may incorrectly reuse an existing connection. This logical error can cause a subsequent request to be sent using the authentication of a previous user, leading to an authentication bypass." } ], "product_status": { "known_affected": [ "CSAFPID-0030", "CSAFPID-0031" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0030", "CSAFPID-0031" ] } ], "title": "CVE-2026-1965", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:7.76.1-40.el9_8.5 or later.", "product_ids": [ "CSAFPID-0030", "CSAFPID-0031" ] } ] }, { "cve": "CVE-2026-19931", "notes": [ { "category": "description", "text": "A flaw was found in libcurl. This vulnerability allows an attacker to reuse an HTTP connection set up for a given hostname using Negotiate authentication. When an initial request is made with empty credentials, a subsequent user's request can be sent over a previously authenticated connection belonging to another user. This could lead to information disclosure or unauthorized access to sensitive data." } ], "product_status": { "known_affected": [ "CSAFPID-0030", "CSAFPID-0031" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0030", "CSAFPID-0031" ] } ], "title": "CVE-2026-19931" }, { "cve": "CVE-2026-22185", "notes": [ { "category": "description", "text": "A flaw was found in OpenLDAP Lightning Memory-Mapped Database (LMDB) mdb_load. When processing malformed input, a local attacker can exploit a heap buffer underflow vulnerability in the readline() function. This can lead to an out-of-bounds read, potentially causing a denial of service (DoS) and limited disclosure of heap memory contents." } ], "product_status": { "known_affected": [ "CSAFPID-0102" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0102" ] } ], "title": "CVE-2026-22185" }, { "cve": "CVE-2026-22703", "notes": [ { "category": "description", "text": "Cosign verification accepts any valid Rekor entry under certain conditions" } ], "product_status": { "known_affected": [ "CSAFPID-0133", "CSAFPID-0233", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0133", "CSAFPID-0233", "CSAFPID-0260" ] } ], "title": "GHSA-whqx-f9j3-ch6m", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2.6.2 or later.", "product_ids": [ "CSAFPID-0133", "CSAFPID-0233", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-22772", "notes": [ { "category": "description", "text": "Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass" } ], "product_status": { "known_affected": [ "CSAFPID-0055", "CSAFPID-0056", "CSAFPID-0186", "CSAFPID-0187", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "baseScore": 5.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0055", "CSAFPID-0056", "CSAFPID-0186", "CSAFPID-0187", "CSAFPID-0260" ] } ], "title": "GHSA-59jp-pj84-45mr", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.8.5 or later.", "product_ids": [ "CSAFPID-0055", "CSAFPID-0056", "CSAFPID-0186", "CSAFPID-0187", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-2303", "notes": [ { "category": "description", "text": "mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling" } ], "product_status": { "known_affected": [ "CSAFPID-0121", "CSAFPID-0122", "CSAFPID-0210", "CSAFPID-0211", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v4": { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "baseScore": 6.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE" } }, "products": [ "CSAFPID-0121", "CSAFPID-0122", "CSAFPID-0210", "CSAFPID-0211", "CSAFPID-0260" ] } ], "title": "GHSA-cp6g-7hqx-qxhp", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.17.7 or later.", "product_ids": [ "CSAFPID-0121", "CSAFPID-0122", "CSAFPID-0210", "CSAFPID-0211", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-23831", "notes": [ { "category": "description", "text": "Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message" } ], "product_status": { "known_affected": [ "CSAFPID-0038", "CSAFPID-0039", "CSAFPID-0165", "CSAFPID-0166", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0038", "CSAFPID-0039", "CSAFPID-0165", "CSAFPID-0166", "CSAFPID-0260" ] } ], "title": "GHSA-273p-m2cw-6833", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.5.0 or later.", "product_ids": [ "CSAFPID-0038", "CSAFPID-0039", "CSAFPID-0165", "CSAFPID-0166", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-23991", "notes": [ { "category": "description", "text": "go-tuf affected by client DoS via malformed server response" } ], "product_status": { "known_affected": [ "CSAFPID-0119", "CSAFPID-0204", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0119", "CSAFPID-0204", "CSAFPID-0260" ] } ], "title": "GHSA-846p-jg2w-w324", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2.3.1 or later.", "product_ids": [ "CSAFPID-0119", "CSAFPID-0204", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-23992", "notes": [ { "category": "description", "text": "go-tuf improperly validates the configured threshold for delegations" } ], "product_status": { "known_affected": [ "CSAFPID-0119", "CSAFPID-0204", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0119", "CSAFPID-0204", "CSAFPID-0260" ] } ], "title": "GHSA-fphv-w9fq-2525", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2.3.1 or later.", "product_ids": [ "CSAFPID-0119", "CSAFPID-0204", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-24051", "notes": [ { "category": "description", "text": "OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking" } ], "product_status": { "known_affected": [ "CSAFPID-0051", "CSAFPID-0206", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.0, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0051", "CSAFPID-0206", "CSAFPID-0260" ] } ], "title": "GHSA-9h8m-3fm2-qjrq", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.40.0 or later.", "product_ids": [ "CSAFPID-0051", "CSAFPID-0206", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-24117", "notes": [ { "category": "description", "text": "Rekor affected by Server-Side Request Forgery (SSRF) via provided public key URL" } ], "product_status": { "known_affected": [ "CSAFPID-0038", "CSAFPID-0039", "CSAFPID-0165", "CSAFPID-0166", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0038", "CSAFPID-0039", "CSAFPID-0165", "CSAFPID-0166", "CSAFPID-0260" ] } ], "title": "GHSA-4c4x-jm2x-pf9j", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.5.0 or later.", "product_ids": [ "CSAFPID-0038", "CSAFPID-0039", "CSAFPID-0165", "CSAFPID-0166", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-24122", "notes": [ { "category": "description", "text": "Cosign considered signatures valid with expired intermediate certificates when transparency log verification is skipped in github.com/sigstore/cosign" } ], "product_status": { "known_affected": [ "CSAFPID-0133", "CSAFPID-0233", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "baseScore": 3.7, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0133", "CSAFPID-0233", "CSAFPID-0260" ] } ], "title": "GO-2026-4529" }, { "cve": "CVE-2026-24137", "notes": [ { "category": "description", "text": "sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal" } ], "product_status": { "known_affected": [ "CSAFPID-0125", "CSAFPID-0126", "CSAFPID-0214", "CSAFPID-0215", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N", "baseScore": 5.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0125", "CSAFPID-0126", "CSAFPID-0214", "CSAFPID-0215", "CSAFPID-0260" ] } ], "title": "GHSA-fcv2-xgw5-pqxf", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.10.4 or later.", "product_ids": [ "CSAFPID-0125", "CSAFPID-0126", "CSAFPID-0214", "CSAFPID-0215", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-24515", "notes": [ { "category": "description", "text": "A null pointer dereference flaw has been discovered in libexpat. The function `XML_ExternalEntityParserCreate` failed to copy the encoding handler data passed to XML_SetUnknownEncodingHandler from the parent to the new subparser. This can cause a NULL dereference from external entities that declare use of an unknown encoding. The expected impact is denial of service. It takes use of both functions `XML_ExternalEntityParserCreate` and `XML_SetUnknownEncodingHandler` for an application to be vulnerable." } ], "product_status": { "known_affected": [ "CSAFPID-0017" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 2.9, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0017" ] } ], "title": "CVE-2026-24515" }, { "cve": "CVE-2026-24686", "notes": [ { "category": "description", "text": "go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names" } ], "product_status": { "known_affected": [ "CSAFPID-0119", "CSAFPID-0204", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0119", "CSAFPID-0204", "CSAFPID-0260" ] } ], "title": "GHSA-jqc5-w2xx-5vq4", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2.4.1 or later.", "product_ids": [ "CSAFPID-0119", "CSAFPID-0204", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-24883", "notes": [ { "category": "description", "text": "A flaw was found in GnuPG. A remote attacker could provide a specially crafted long signature packet that, when processed, causes the application to crash. This vulnerability leads to a denial of service (DoS), making the GnuPG application unavailable to legitimate users." } ], "product_status": { "known_affected": [ "CSAFPID-0094" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.7, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0094" ] } ], "title": "CVE-2026-24883" }, { "cve": "CVE-2026-25542", "notes": [ { "category": "description", "text": "Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching" } ], "product_status": { "known_affected": [ "CSAFPID-0123", "CSAFPID-0124", "CSAFPID-0212", "CSAFPID-0213", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0123", "CSAFPID-0124", "CSAFPID-0212", "CSAFPID-0213", "CSAFPID-0260" ] } ], "title": "GHSA-rmx9-2pp3-xhcr", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.0.2 or later.", "product_ids": [ "CSAFPID-0123", "CSAFPID-0124", "CSAFPID-0212", "CSAFPID-0213", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-25679", "notes": [ { "category": "description", "text": "url.Parse insufficiently validated the host/authority component and accepted some invalid URLs." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ], "title": "GO-2026-4601", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.8 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-25680", "notes": [ { "category": "description", "text": "Go Net HTML parser is vulnerable to denial of service" } ], "product_status": { "known_affected": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0074", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0192", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0074", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0192", "CSAFPID-0260" ] } ], "title": "GHSA-5cv4-jp36-h3mw", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.55.0 or later.", "product_ids": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0074", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0192", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-25681", "notes": [ { "category": "description", "text": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering." } ], "product_status": { "known_affected": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0074", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0192", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0074", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0192", "CSAFPID-0260" ] } ], "title": "GO-2026-5029", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.55.0 or later.", "product_ids": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0074", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0192", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-25934", "notes": [ { "category": "description", "text": "go-git improperly verifies data integrity values for .idx and .pack files" } ], "product_status": { "known_affected": [ "CSAFPID-0008", "CSAFPID-0036", "CSAFPID-0173", "CSAFPID-0174", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0008", "CSAFPID-0036", "CSAFPID-0173", "CSAFPID-0174", "CSAFPID-0260" ] } ], "title": "GHSA-37cx-329c-33x3", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 5.16.5 or later.", "product_ids": [ "CSAFPID-0008", "CSAFPID-0036", "CSAFPID-0173", "CSAFPID-0174", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-2673", "notes": [ { "category": "description", "text": "A key group selection preference flaw has been discovered in OpenSSL. An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the \"DEFAULT\" keyword. A less preferred key exchange may be used even when a more preferred group is supported by both client and server, if the group was not included among the client's initial predicated keyshares. This will sometimes be the case with the new hybrid post-quantum groups, if the client chooses to defer their use until specifically requested by the server. No OpenSSL FIPS modules are affected by this issue, the code in question lies outside the FIPS boundary." } ], "product_status": { "known_affected": [ "CSAFPID-0019", "CSAFPID-0103", "CSAFPID-0104", "CSAFPID-0020" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0019", "CSAFPID-0103", "CSAFPID-0104", "CSAFPID-0020" ] } ], "title": "CVE-2026-2673" }, { "cve": "CVE-2026-27136", "notes": [ { "category": "description", "text": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering." } ], "product_status": { "known_affected": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0074", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0192", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0074", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0192", "CSAFPID-0260" ] } ], "title": "GO-2026-5030", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.55.0 or later.", "product_ids": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0074", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0192", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-27139", "notes": [ { "category": "description", "text": "On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened.\n\nThe impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the filesystem without permitting reading or writing files outside the root." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "baseScore": 2.5, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ], "title": "GO-2026-4602", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.8 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-27142", "notes": [ { "category": "description", "text": "Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value \"refresh\".\n\nA new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow \"url=\" by setting htmlmetacontenturlescape=0." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ], "title": "GO-2026-4603", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.8 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-27145", "notes": [ { "category": "description", "text": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname.\n\nWith a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] } ], "title": "GO-2026-5037", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.11 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-27171", "notes": [ { "category": "description", "text": "A flaw was found in zlib. An attacker providing specially crafted input to the `crc32_combine64` or `crc32_combine_gen64` functions could trigger an infinite loop within the `x2nmodp` function. This leads to excessive CPU consumption, which can result in a Denial of Service (DoS) for the affected system." } ], "product_status": { "known_affected": [ "CSAFPID-0144" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0144" ] } ], "title": "CVE-2026-27171" }, { "cve": "CVE-2026-27456", "notes": [ { "category": "description", "text": "A flaw was found in util-linux. When an /etc/fstab entry is configured with the user,loop options, the `mount` program checks the file path with user permissions but later opens it with root privileges. This creates a brief Time-of-Check-Time-of-Use (TOCTOU) window where an attacker can substitute the intended file with a malicious symbolic link. This allows a local unprivileged user to mount any root-owned file or block device that contains a valid filesystem, gaining full read access to its contents." } ], "product_status": { "known_affected": [ "CSAFPID-0023", "CSAFPID-0024", "CSAFPID-0025", "CSAFPID-0026", "CSAFPID-0027" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0023", "CSAFPID-0024", "CSAFPID-0025", "CSAFPID-0026", "CSAFPID-0027" ] } ], "title": "CVE-2026-27456" }, { "cve": "CVE-2026-27896", "notes": [ { "category": "description", "text": "MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity" } ], "product_status": { "known_affected": [ "CSAFPID-0049", "CSAFPID-0205", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0049", "CSAFPID-0205", "CSAFPID-0260" ] } ], "title": "GHSA-wvj2-96wp-fq3f", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.3.1 or later.", "product_ids": [ "CSAFPID-0049", "CSAFPID-0205", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-28387", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSL. An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. This vulnerability could lead to data corruption, application crashes, or, in severe cases, arbitrary code execution. This issue is highly specific and uncommon, as it only affects clients using both PKIX-TA(0)/PKIX-EE(1) and DANE-TA(2) certificate usages and communicating with a server publishing a TLSA record set with both types of records." } ], "product_status": { "known_affected": [ "CSAFPID-0019", "CSAFPID-0020" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 3.7, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0019", "CSAFPID-0020" ] } ], "title": "CVE-2026-28387" }, { "cve": "CVE-2026-28388", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSL. When processing a malformed delta Certificate Revocation List (CRL) that lacks a required CRL Number extension, a NULL pointer dereference can occur. This vulnerability can be exploited by a remote attacker who provides a specially crafted delta CRL to an application that has delta CRL processing enabled, leading to a Denial of Service (DoS) for the application." } ], "product_status": { "known_affected": [ "CSAFPID-0019", "CSAFPID-0020" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0019", "CSAFPID-0020" ] } ], "title": "CVE-2026-28388" }, { "cve": "CVE-2026-28389", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSL. A remote attacker could exploit this by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message with KeyAgreeRecipientInfo. This vulnerability arises because the software attempts to process an optional field without verifying its existence, leading to a NULL pointer dereference. This can result in a Denial of Service (DoS) for applications that handle untrusted CMS data." } ], "product_status": { "known_affected": [ "CSAFPID-0019", "CSAFPID-0020" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0019", "CSAFPID-0020" ] } ], "title": "CVE-2026-28389" }, { "cve": "CVE-2026-28390", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS)." } ], "product_status": { "known_affected": [ "CSAFPID-0019" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0019" ] } ], "title": "CVE-2026-28390", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.5.5-3.el9_8 or later.", "product_ids": [ "CSAFPID-0019" ] } ] }, { "cve": "CVE-2026-31789", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSL. This vulnerability, a heap buffer overflow, affects 32-bit systems when processing an unusually large X.509 certificate. If an application or service attempts to print or log such a specially crafted certificate, it could lead to a system crash or potentially allow an attacker to execute arbitrary code. This issue is considered low severity due to the specific conditions required for exploitation, including the need for an extremely large certificate and a 32-bit operating environment." } ], "product_status": { "known_affected": [ "CSAFPID-0019", "CSAFPID-0020" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "baseScore": 5.8, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0019", "CSAFPID-0020" ] } ], "title": "CVE-2026-31789" }, { "cve": "CVE-2026-31790", "notes": [ { "category": "description", "text": "A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without proper validation. Consequently, the application might send the contents of an uninitialized memory buffer, which could contain confidential information, to the attacker." } ], "product_status": { "known_affected": [ "CSAFPID-0019" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 5.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0019" ] } ], "title": "CVE-2026-31790", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.5.5-2.el9_8 or later.", "product_ids": [ "CSAFPID-0019" ] } ] }, { "cve": "CVE-2026-32280", "notes": [ { "category": "description", "text": "During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ], "title": "GO-2026-4947", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.9 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-32281", "notes": [ { "category": "description", "text": "Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service.\n\nThis only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ], "title": "GO-2026-4946", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.9 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-32282", "notes": [ { "category": "description", "text": "On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root.\n\nThe Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag, which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its target before acting and returns an error if the target is a symlink lying outside the root, so the impact is limited to cases where the target is replaced with a symlink between the check and operation." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 6.4, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ], "title": "GO-2026-4864", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.9 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-32283", "notes": [ { "category": "description", "text": "If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service.\n\nThis only affects TLS 1.3." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ], "title": "GO-2026-4870", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.9 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-32288", "notes": [ { "category": "description", "text": "tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the \"old GNU sparse map\" format." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ], "title": "GO-2026-4869", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.9 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-32289", "notes": [ { "category": "description", "text": "Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. Additionally template actions within JS template literals did not properly track the brace depth, leading to incorrect escaping being applied.\n\nThese issues could cause actions within JS template literals to be incorrectly or improperly escaped, leading to XSS vulnerabilities." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ], "title": "GO-2026-4865", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.9 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-32316", "notes": [ { "category": "description", "text": "A flaw was found in jq, a command-line JSON processor. An attacker can exploit an integer overflow vulnerability by crafting queries that produce extremely large strings. This causes a 32-bit unsigned integer overflow in the buffer allocation size calculation, leading to a drastically undersized memory buffer. Subsequent memory copy operations then write the full string data into this undersized buffer, causing a heap-based buffer overflow. This can result in a Denial of Service (DoS) by crashing the process or potentially allow for further exploitation through heap corruption." } ], "product_status": { "known_affected": [ "CSAFPID-0022" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0022" ] } ], "title": "CVE-2026-32316" }, { "cve": "CVE-2026-32776", "notes": [ { "category": "description", "text": "A flaw was found in libexpat. A remote attacker could exploit this vulnerability by providing specially crafted XML content with empty external parameter entities. This could lead to a NULL pointer dereference, causing the application to crash and resulting in a Denial of Service (DoS)." } ], "product_status": { "known_affected": [ "CSAFPID-0017" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.2, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0017" ] } ], "title": "CVE-2026-32776" }, { "cve": "CVE-2026-32777", "notes": [ { "category": "description", "text": "A flaw was found in libexpat. A remote attacker could exploit this vulnerability by providing specially crafted Document Type Definition (DTD) content. This could lead to an infinite loop during parsing, resulting in a Denial of Service (DoS) for the application using libexpat." } ], "product_status": { "known_affected": [ "CSAFPID-0017" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 4.0, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0017" ] } ], "title": "CVE-2026-32777" }, { "cve": "CVE-2026-32778", "notes": [ { "category": "description", "text": "A flaw was found in libexpat. This vulnerability allows an attacker to trigger a NULL pointer dereference in the `setContext` function. This occurs when the system attempts to retry an operation after an out-of-memory condition, which can lead to a Denial of Service (DoS) for the affected application." } ], "product_status": { "known_affected": [ "CSAFPID-0017" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.1, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0017" ] } ], "title": "CVE-2026-32778" }, { "cve": "CVE-2026-32952", "notes": [ { "category": "description", "text": "go-ntlmssp NTLM challenges can panic on malformed payloads" } ], "product_status": { "known_affected": [ "CSAFPID-0129" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0129" ] } ], "title": "GHSA-pjcq-xvwq-hhpj", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.1.1 or later.", "product_ids": [ "CSAFPID-0129" ] } ] }, { "cve": "CVE-2026-33022", "notes": [ { "category": "description", "text": "Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun" } ], "product_status": { "known_affected": [ "CSAFPID-0123", "CSAFPID-0124", "CSAFPID-0212", "CSAFPID-0213", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0123", "CSAFPID-0124", "CSAFPID-0212", "CSAFPID-0213", "CSAFPID-0260" ] } ], "title": "GHSA-cv4x-93xx-wgfj", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.0.1 or later.", "product_ids": [ "CSAFPID-0123", "CSAFPID-0124", "CSAFPID-0212", "CSAFPID-0213", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-33056", "notes": [ { "category": "description", "text": "A flaw was found in tar-rs, a Rust library for reading and writing tar archives. When unpacking a crafted tar archive, an attacker can exploit a symbolic link vulnerability. By including a symlink followed by a directory with the same name, the library incorrectly applies file permissions to the symlink's target. This allows an attacker to modify the permissions of arbitrary directories outside the intended extraction location." } ], "product_status": { "known_affected": [ "CSAFPID-0089" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "baseScore": 4.4, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0089" ] } ], "title": "CVE-2026-33056" }, { "cve": "CVE-2026-33186", "notes": [ { "category": "description", "text": "gRPC-Go has an authorization bypass via missing leading slash in :path" } ], "product_status": { "known_affected": [ "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0167", "CSAFPID-0168", "CSAFPID-0169", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 9.1, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0167", "CSAFPID-0168", "CSAFPID-0169", "CSAFPID-0260" ] } ], "title": "GHSA-p77j-4mvh-x3m3", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.79.3 or later.", "product_ids": [ "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0167", "CSAFPID-0168", "CSAFPID-0169", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-33252", "notes": [ { "category": "description", "text": "Cross-Site Tool Execution for HTTP Servers without Authorizatrion in github.com/modelcontextprotocol/go-sdk" } ], "product_status": { "known_affected": [ "CSAFPID-0049", "CSAFPID-0205", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L", "baseScore": 7.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0049", "CSAFPID-0205", "CSAFPID-0260" ] } ], "title": "GHSA-89xv-2j6f-qhc8", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.4.1 or later.", "product_ids": [ "CSAFPID-0049", "CSAFPID-0205", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-33540", "notes": [ { "category": "description", "text": "Distribution affected by pull-through cache credential exfiltration via www-authenticate bearer realm" } ], "product_status": { "known_affected": [ "CSAFPID-0037", "CSAFPID-0175", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0037", "CSAFPID-0175", "CSAFPID-0260" ] } ], "title": "GHSA-3p65-76g6-3w7r", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 3.1.0 or later.", "product_ids": [ "CSAFPID-0037", "CSAFPID-0175", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-33747", "notes": [ { "category": "description", "text": "BuildKit's Malicious frontend can cause file escape outside of storage root" } ], "product_status": { "known_affected": [ "CSAFPID-0040", "CSAFPID-0041", "CSAFPID-0180", "CSAFPID-0181", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0040", "CSAFPID-0041", "CSAFPID-0180", "CSAFPID-0181", "CSAFPID-0260" ] } ], "title": "GHSA-4c29-8rgm-jvjj", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.28.1 or later.", "product_ids": [ "CSAFPID-0040", "CSAFPID-0041", "CSAFPID-0180", "CSAFPID-0181", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-33748", "notes": [ { "category": "description", "text": "BuildKit Git URL subdir component can cause access to restricted files" } ], "product_status": { "known_affected": [ "CSAFPID-0040", "CSAFPID-0041", "CSAFPID-0180", "CSAFPID-0181", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v4": { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "baseScore": 8.2, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE" } }, "products": [ "CSAFPID-0040", "CSAFPID-0041", "CSAFPID-0180", "CSAFPID-0181", "CSAFPID-0260" ] } ], "title": "GHSA-4vrq-3vrq-g6gg", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.28.1 or later.", "product_ids": [ "CSAFPID-0040", "CSAFPID-0041", "CSAFPID-0180", "CSAFPID-0181", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-33762", "notes": [ { "category": "description", "text": "go-git missing validation decoding Index v4 files leads to panic" } ], "product_status": { "known_affected": [ "CSAFPID-0008", "CSAFPID-0036", "CSAFPID-0173", "CSAFPID-0174", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", "baseScore": 2.8, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0008", "CSAFPID-0036", "CSAFPID-0173", "CSAFPID-0174", "CSAFPID-0260" ] } ], "title": "GHSA-gm2x-2g9h-ccm8", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 5.17.1 or later.", "product_ids": [ "CSAFPID-0008", "CSAFPID-0036", "CSAFPID-0173", "CSAFPID-0174", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-33811", "notes": [ { "category": "description", "text": "When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] } ], "title": "GO-2026-4981", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.10 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-33814", "notes": [ { "category": "description", "text": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0." } ], "product_status": { "known_affected": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0074", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0192", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0074", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0192", "CSAFPID-0260" ] } ], "title": "GO-2026-4918", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.53.0 or later.", "product_ids": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0074", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0192", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-33818", "notes": [ { "category": "description", "text": "Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0077", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0162", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0077", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0162", "CSAFPID-0260" ] } ], "title": "GO-2026-5972", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.13 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0077", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0162", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-33947", "notes": [ { "category": "description", "text": "A flaw was found in jq, a command line JSON processor. Processing a crafted JSON document, specifically when a large array is used as a path argument to the `jv_setpath`, `jv_getpath` and `delpaths_sorted` functions can lead to an uncontrolled recursion and exhausts the call stack, causing an application crash and resulting in a denial of service." } ], "product_status": { "known_affected": [ "CSAFPID-0022" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.2, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0022" ] } ], "title": "CVE-2026-33947" }, { "cve": "CVE-2026-33948", "notes": [ { "category": "description", "text": "A flaw was found in jq, a command-line JSON processor. This vulnerability allows a remote attacker to bypass input validation by crafting malicious JSON input containing embedded null (NUL) bytes. Due to incorrect handling of input buffer lengths, jq truncates the input at the first NUL byte, validating only the benign prefix and silently discarding any malicious data that follows. This can lead to parser differential attacks where downstream systems, relying on jq for validation, may process the full, unvalidated input, potentially leading to unexpected behavior or security compromises." } ], "product_status": { "known_affected": [ "CSAFPID-0022" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N", "baseScore": 3.8, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0022" ] } ], "title": "CVE-2026-33948" }, { "cve": "CVE-2026-33997", "notes": [ { "category": "description", "text": "Moby has an Off-by-one error in its plugin privilege validation" } ], "product_status": { "known_affected": [ "CSAFPID-0067", "CSAFPID-0068", "CSAFPID-0069", "CSAFPID-0184", "CSAFPID-0185", "CSAFPID-0229", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0067", "CSAFPID-0068", "CSAFPID-0069", "CSAFPID-0184", "CSAFPID-0185", "CSAFPID-0229", "CSAFPID-0260" ] } ], "title": "GHSA-pxq6-2prw-chj9", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 29.3.1 or later.", "product_ids": [ "CSAFPID-0067", "CSAFPID-0068", "CSAFPID-0069", "CSAFPID-0184", "CSAFPID-0185", "CSAFPID-0229", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-34040", "notes": [ { "category": "description", "text": "Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker" } ], "product_status": { "known_affected": [ "CSAFPID-0067", "CSAFPID-0068", "CSAFPID-0069", "CSAFPID-0184", "CSAFPID-0185", "CSAFPID-0229", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0067", "CSAFPID-0068", "CSAFPID-0069", "CSAFPID-0184", "CSAFPID-0185", "CSAFPID-0229", "CSAFPID-0260" ] } ], "title": "GO-2026-4887", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 29.3.1 or later.", "product_ids": [ "CSAFPID-0067", "CSAFPID-0068", "CSAFPID-0069", "CSAFPID-0184", "CSAFPID-0185", "CSAFPID-0229", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-34165", "notes": [ { "category": "description", "text": "go-git: Maliciously crafted idx file can cause asymmetric memory consumption" } ], "product_status": { "known_affected": [ "CSAFPID-0008", "CSAFPID-0036", "CSAFPID-0173", "CSAFPID-0174", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.0, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0008", "CSAFPID-0036", "CSAFPID-0173", "CSAFPID-0174", "CSAFPID-0260" ] } ], "title": "GHSA-jhf3-xxhw-2wpp", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 5.17.1 or later.", "product_ids": [ "CSAFPID-0008", "CSAFPID-0036", "CSAFPID-0173", "CSAFPID-0174", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-34180", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSL. An integer truncation vulnerability in the ASN.1 decoder can occur when processing a crafted DER-encoded ASN.1 structure with a primitive element exceeding 2 gigabytes. A remote attacker could exploit this to cause a heap buffer over-read. This may lead to an application crash, resulting in a Denial of Service (DoS), or potentially disclose sensitive information by loading memory contents beyond the input buffer. This issue primarily affects 64-bit Unix and Unix-like platforms." } ], "product_status": { "known_affected": [ "CSAFPID-0019" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H", "baseScore": 5.0, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0019" ] } ], "title": "CVE-2026-34180", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.5.5-4.el9_8 or later.", "product_ids": [ "CSAFPID-0019" ] } ] }, { "cve": "CVE-2026-34181", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSL. This vulnerability allows a remote attacker to forge PKCS#12 (Public-Key Cryptography Standards #12) files that use Password-Based Message Authentication Code 1 (PBMAC1) with short HMAC (Hash-based Message Authentication Code) keys. This can lead to a service accepting attacker-controlled certificates and private keys with a 1 in 256 probability, potentially enabling impersonation." } ], "product_status": { "known_affected": [ "CSAFPID-0019" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "baseScore": 6.3, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0019" ] } ], "title": "CVE-2026-34181", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.5.5-4.el9_8 or later.", "product_ids": [ "CSAFPID-0019" ] } ] }, { "cve": "CVE-2026-34182", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSL's Cryptographic Message Services (CMS) AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity validation. Consequently, an attacker may achieve key-equivalent functionality for a given CMS recipient." } ], "product_status": { "known_affected": [ "CSAFPID-0019" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0019" ] } ], "title": "CVE-2026-34182", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.5.5-4.el9_8 or later.", "product_ids": [ "CSAFPID-0019" ] } ] }, { "cve": "CVE-2026-34183", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSL's QUIC PATH_CHALLENGE handler. A remote attacker can exploit this vulnerability by flooding a QUIC client or server with specially crafted PATH_CHALLENGE frames. This leads to unbounded memory allocation within the local QUIC stack, as the system continuously allocates PATH_RESPONSE frames without them being acknowledged. The primary consequence is a Denial of Service (DoS), causing the affected application to terminate abnormally due to memory exhaustion." } ], "product_status": { "known_affected": [ "CSAFPID-0019" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0019" ] } ], "title": "CVE-2026-34183", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.5.5-4.el9_8 or later.", "product_ids": [ "CSAFPID-0019" ] } ] }, { "cve": "CVE-2026-34742", "notes": [ { "category": "description", "text": "DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost" } ], "product_status": { "known_affected": [ "CSAFPID-0049", "CSAFPID-0205", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "baseScore": 8.1, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0049", "CSAFPID-0205", "CSAFPID-0260" ] } ], "title": "GHSA-xw59-hvm2-8pj6", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.4.0 or later.", "product_ids": [ "CSAFPID-0049", "CSAFPID-0205", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-34743", "notes": [ { "category": "description", "text": "A flaw was found in XZ Utils. When the `lzma_index_decoder()` function processes an empty index, and a subsequent `lzma_index_append()` operation is performed, insufficient memory is allocated. This can lead to a buffer overflow, potentially causing a denial of service (DoS) for affected systems." } ], "product_status": { "known_affected": [ "CSAFPID-0105" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW" } }, "products": [ "CSAFPID-0105" ] } ], "title": "CVE-2026-34743" }, { "cve": "CVE-2026-34986", "notes": [ { "category": "description", "text": "Go JOSE Panics in JWE decryption" } ], "product_status": { "known_affected": [ "CSAFPID-0047", "CSAFPID-0048", "CSAFPID-0201", "CSAFPID-0202", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0047", "CSAFPID-0048", "CSAFPID-0201", "CSAFPID-0202", "CSAFPID-0260" ] } ], "title": "GHSA-78h2-9frx-2jm8", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 3.0.5 or later.", "product_ids": [ "CSAFPID-0047", "CSAFPID-0048", "CSAFPID-0201", "CSAFPID-0202", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-35172", "notes": [ { "category": "description", "text": "Distribution: stale blob access resurrection via repo-scoped redis descriptor cache invalidation" } ], "product_status": { "known_affected": [ "CSAFPID-0037", "CSAFPID-0175", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0037", "CSAFPID-0175", "CSAFPID-0260" ] } ], "title": "GHSA-f2g3-hh2r-cwgc", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 3.1.0 or later.", "product_ids": [ "CSAFPID-0037", "CSAFPID-0175", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-35206", "notes": [ { "category": "description", "text": "Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment" } ], "product_status": { "known_affected": [ "CSAFPID-0182", "CSAFPID-0260" ] }, "title": "GHSA-hr2v-4r36-88hr" }, { "cve": "CVE-2026-35385", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSH. When the `scp` command is used by a root user to download a file with the legacy protocol option (`-O`) and without preserving original file permissions (`-p`), the downloaded file can be installed with elevated privileges (setuid or setgid). This unexpected behavior could allow a malicious file to execute with higher permissions than intended, posing a security risk through potential privilege escalation." } ], "product_status": { "known_affected": [ "CSAFPID-0021" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0021" ] } ], "title": "CVE-2026-35385", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:9.9p1-7.el9_8 or later.", "product_ids": [ "CSAFPID-0021" ] } ] }, { "cve": "CVE-2026-35386", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSH. This vulnerability allows a remote attacker to achieve arbitrary command execution by injecting shell metacharacters into a username provided on the command line. Exploitation requires an untrusted username and a non-default configuration of the '%' character in `ssh_config`." } ], "product_status": { "known_affected": [ "CSAFPID-0021" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "baseScore": 3.6, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0021" ] } ], "title": "CVE-2026-35386", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:9.9p1-7.el9_8 or later.", "product_ids": [ "CSAFPID-0021" ] } ] }, { "cve": "CVE-2026-35387", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSH. This vulnerability allows the system to use unintended Elliptic Curve Digital Signature Algorithm (ECDSA) algorithms. This occurs because the configuration for accepted public key algorithms is misinterpreted, leading to the use of weaker cryptographic methods than intended. This could potentially allow an attacker to compromise the confidentiality of data." } ], "product_status": { "known_affected": [ "CSAFPID-0021" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "baseScore": 3.1, "baseSeverity": "LOW", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0021" ] } ], "title": "CVE-2026-35387", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:9.9p1-7.el9_8 or later.", "product_ids": [ "CSAFPID-0021" ] } ] }, { "cve": "CVE-2026-35388", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSH. This vulnerability allows for a low integrity impact due to the omission of connection multiplexing confirmation for proxy-mode multiplexing sessions. A local user, under specific and complex conditions requiring user interaction, could potentially establish a multiplexed session without explicit confirmation, leading to unintended data handling." } ], "product_status": { "known_affected": [ "CSAFPID-0021" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "baseScore": 2.2, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0021" ] } ], "title": "CVE-2026-35388", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:9.9p1-7.el9_8 or later.", "product_ids": [ "CSAFPID-0021" ] } ] }, { "cve": "CVE-2026-35414", "notes": [ { "category": "description", "text": "A flaw was found in OpenSSH. This vulnerability arises from the incorrect handling of the authorized_keys principals option in uncommon scenarios. Specifically, when a principals list is used with a Certificate Authority that includes comma characters, OpenSSH may misinterpret the input. This could lead to security bypasses, potentially allowing unintended access or information disclosure in specific authentication contexts." } ], "product_status": { "known_affected": [ "CSAFPID-0021" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "baseScore": 4.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0021" ] } ], "title": "CVE-2026-35414", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:9.9p1-7.el9_8 or later.", "product_ids": [ "CSAFPID-0021" ] } ] }, { "cve": "CVE-2026-35469", "notes": [ { "category": "description", "text": "SpdyStream: DOS on CRI" } ], "product_status": { "known_affected": [ "CSAFPID-0062", "CSAFPID-0063", "CSAFPID-0064", "CSAFPID-0225", "CSAFPID-0226", "CSAFPID-0227", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v4": { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "baseScore": 8.7, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE" } }, "products": [ "CSAFPID-0062", "CSAFPID-0063", "CSAFPID-0064", "CSAFPID-0225", "CSAFPID-0226", "CSAFPID-0227", "CSAFPID-0260" ] } ], "title": "GHSA-pc3f-x583-g7j2", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.5.1 or later.", "product_ids": [ "CSAFPID-0062", "CSAFPID-0063", "CSAFPID-0064", "CSAFPID-0225", "CSAFPID-0226", "CSAFPID-0227", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-3783", "notes": [ { "category": "description", "text": "A flaw was found in curl. When an OAuth2 bearer token is used for an HTTP(S) transfer that redirects to a second URL, curl could unintentionally leak the token. This occurs if the second hostname has entries in the `.netrc` file, allowing the bearer token intended for the first host to be sent to the redirected host. This information disclosure could allow an attacker to gain unauthorized access." } ], "product_status": { "known_affected": [ "CSAFPID-0030", "CSAFPID-0031" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "baseScore": 5.7, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0030", "CSAFPID-0031" ] } ], "title": "CVE-2026-3783", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:7.76.1-40.el9_8.5 or later.", "product_ids": [ "CSAFPID-0030", "CSAFPID-0031" ] } ] }, { "cve": "CVE-2026-3784", "notes": [ { "category": "description", "text": "A flaw was found in curl. This vulnerability allows curl to wrongly reuse an existing HTTP proxy connection when performing a CONNECT request to a server, even if the new request uses different authentication credentials for the HTTP proxy. This improper connection reuse could lead to an attacker gaining unauthorized access to resources or information intended for a different user." } ], "product_status": { "known_affected": [ "CSAFPID-0030", "CSAFPID-0031" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0030", "CSAFPID-0031" ] } ], "title": "CVE-2026-3784" }, { "cve": "CVE-2026-39395", "notes": [ { "category": "description", "text": "Cosign's verify-blob-attestation reports false positive when payload parsing fails in github.com/sigstore/cosign" } ], "product_status": { "known_affected": [ "CSAFPID-0133", "CSAFPID-0233", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0133", "CSAFPID-0233", "CSAFPID-0260" ] } ], "title": "GO-2026-5694", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2.6.3 or later.", "product_ids": [ "CSAFPID-0133", "CSAFPID-0233", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-39820", "notes": [ { "category": "description", "text": "Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] } ], "title": "GO-2026-4986", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.10 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-39821", "notes": [ { "category": "description", "text": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error.\n\nThis behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\"." } ], "product_status": { "known_affected": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0074", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0077", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0162", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0192", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "baseScore": 8.2, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0074", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0077", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0162", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0192", "CSAFPID-0260" ] } ], "title": "GO-2026-5026", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.55.0 or later.", "product_ids": [ "CSAFPID-0070", "CSAFPID-0071", "CSAFPID-0072", "CSAFPID-0073", "CSAFPID-0074", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0077", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0162", "CSAFPID-0188", "CSAFPID-0189", "CSAFPID-0190", "CSAFPID-0191", "CSAFPID-0192", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-39822", "notes": [ { "category": "description", "text": "On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /.\n\nFor example, 'root.Open(\"symlink/\")' will open \"symlink\" even when \"symlink\" is a symbolic link pointing outside of the root." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] } ], "title": "GO-2026-4970", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.12 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-39823", "notes": [ { "category": "description", "text": "CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute. If the URL content were to insert ASCII whitespaces around the '=' rune inside of the attribute, the escaper would fail to similarly escape it, leading to XSS." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] } ], "title": "GO-2026-4982", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.10 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-39824", "notes": [ { "category": "description", "text": "NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-bit number of bytes), it returns a truncated string rather than an error." } ], "product_status": { "known_affected": [ "CSAFPID-0148", "CSAFPID-0149", "CSAFPID-0150", "CSAFPID-0151", "CSAFPID-0240", "CSAFPID-0241", "CSAFPID-0242", "CSAFPID-0243", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0148", "CSAFPID-0149", "CSAFPID-0150", "CSAFPID-0151", "CSAFPID-0240", "CSAFPID-0241", "CSAFPID-0242", "CSAFPID-0243", "CSAFPID-0260" ] } ], "title": "GO-2026-5024", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0.44.0 or later.", "product_ids": [ "CSAFPID-0148", "CSAFPID-0149", "CSAFPID-0150", "CSAFPID-0151", "CSAFPID-0240", "CSAFPID-0241", "CSAFPID-0242", "CSAFPID-0243", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-39825", "notes": [ { "category": "description", "text": "ReverseProxy can forward queries containing parameters not visible to Rewrite functions.\n\nWhen used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery. ReverseProxy does not take ParseQuery's limit on the total number of query parameters (controlled by GODEBUG=urlmaxqueryparams=N) into account. This can permit ReverseProxy to forward a request containing a query parameter that is not visible to the Rewrite function.\n\nFor example, the query \"a1=x&a2=x&...&a10000=x&hidden=y\" can forward the parameter \"hidden=y\" while hiding it from the proxy's Rewrite function." } ], "product_status": { "known_affected": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] }, "metrics": [ { "content": { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE" } }, "products": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] } ], "title": "GO-2026-4976", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1.25.10 or later.", "product_ids": [ "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0075", "CSAFPID-0076", "CSAFPID-0157", "CSAFPID-0158", "CSAFPID-0159", "CSAFPID-0160", "CSAFPID-0161", "CSAFPID-0260" ] } ] }, { "cve": "CVE-2026-39826", "notes": [ { "category": "description", "text": "If a trusted template author were to write a