{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-29063", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-03-03T20:51:43.481Z", "datePublished": "2026-03-06T18:25:22.438Z", "dateUpdated": "2026-09-10T12:05:01.255Z"}, "containers": {"cna": {"title": "Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable", "problemTypes": [{"descriptions": [{"cweId": "CWE-1321", "lang": "en", "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 8.7, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"}, {"name": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3", "tags": ["x_refsource_MISC"], "url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"}, {"name": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8", "tags": ["x_refsource_MISC"], "url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"}, {"name": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5", "tags": ["x_refsource_MISC"], "url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"}], "affected": [{"vendor": "immutable-js", "product": "immutable-js", "versions": [{"version": "< 3.8.3", "status": "affected"}, {"version": "< 4.3.7", "status": "affected"}, {"version": "< 5.1.5", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-06T18:25:22.438Z"}, "descriptions": [{"lang": "en", "value": "Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5."}], "source": {"advisory": "GHSA-wf6x-7x77-mvgw", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-06T19:32:37.694711Z", "id": "CVE-2026-29063", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-06T19:33:31.642Z"}}, {"affected": [{"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "defaultStatus": "affected", "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9", "product": "Cluster Observability Operator 1.5.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782839279", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "defaultStatus": "affected", "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9", "product": "Cluster Observability Operator 1.5.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782840539", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "defaultStatus": "affected", "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9", "product": "Cluster Observability Operator 1.5.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782839996", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9"], "defaultStatus": "affected", "packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9", "product": "Migration Toolkit for Virtualization 2.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779139872", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9"], "defaultStatus": "affected", "packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9", "product": "Migration Toolkit for Virtualization 2.9", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1778927462", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_engine:2.10::el9"], "defaultStatus": "affected", "packageName": "multicluster-engine/console-mce-rhel9", "product": "multicluster engine for Kubernetes 2.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777128790", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_engine:2.11::el9"], "defaultStatus": "affected", "packageName": "multicluster-engine/console-mce-rhel9", "product": "multicluster engine for Kubernetes 2.11", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777559392", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_engine:2.6::el9"], "defaultStatus": "affected", "packageName": "multicluster-engine/console-mce-rhel9", "product": "multicluster engine for Kubernetes 2.6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776223790", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_engine:2.7::el9"], "defaultStatus": "affected", "packageName": "multicluster-engine/console-mce-rhel9", "product": "multicluster engine for Kubernetes 2.7", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777306226", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_engine:2.8::el9"], "defaultStatus": "affected", "packageName": "multicluster-engine/console-mce-rhel9", "product": "multicluster engine for Kubernetes 2.8", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1775116156", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_engine:2.9::el9"], "defaultStatus": "affected", "packageName": "multicluster-engine/console-mce-rhel9", "product": "multicluster engine for Kubernetes 2.9", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777301444", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:network_observ_optr:1.11::el9"], "defaultStatus": "affected", "packageName": "network-observability/network-observability-console-plugin-rhel9", "product": "Network Observability (NETOBSERV) 1.11.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1774431617", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:network_observ_optr:1.12::el9"], "defaultStatus": "affected", "packageName": "network-observability/network-observability-console-plugin-pf4-rhel9", "product": "Network Observability (NETOBSERV) 1.12.2", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1780920979", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:acm:2.14::el9"], "defaultStatus": "affected", "packageName": "rhacm2/console-rhel9", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783451729", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:acm:2.15::el9"], "defaultStatus": "affected", "packageName": "rhacm2/console-rhel9", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776927126", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:acm:2.16::el9"], "defaultStatus": "affected", "packageName": "rhacm2/console-rhel9", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777559387", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:advanced_cluster_security:4.8::el8"], "defaultStatus": "affected", "packageName": "advanced-cluster-security/rhacs-main-rhel8", "product": "Red Hat Advanced Cluster Security 4.8", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777307791", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:advanced_cluster_security:4.9::el8"], "defaultStatus": "affected", "packageName": "advanced-cluster-security/rhacs-main-rhel8", "product": "Red Hat Advanced Cluster Security 4.9", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777986630", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:advanced_cluster_security:4.10::el8"], "defaultStatus": "affected", "packageName": "advanced-cluster-security/rhacs-main-rhel8", "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777976489", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhdh:1.8::el9"], "defaultStatus": "affected", "packageName": "rhdh/rhdh-hub-rhel9", "product": "Red Hat Developer Hub 1.8", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776784286", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhdh:1.9::el9"], "defaultStatus": "affected", "packageName": "rhdh/rhdh-hub-rhel9", "product": "Red Hat Developer Hub 1.9", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777903262", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:discovery:2::el9"], "defaultStatus": "affected", "packageName": "discovery/discovery-ui-rhel9", "product": "Red Hat Discovery 2", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1775675922", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:edge_manager:1.0::el9"], "defaultStatus": "affected", "packageName": "rhem/flightctl-ui-ocp-rhel9", "product": "Red Hat Edge Manager 1.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783502765", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:edge_manager:1.0::el9"], "defaultStatus": "affected", "packageName": "rhem/flightctl-ui-rhel9", "product": "Red Hat Edge Manager 1.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783502438", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:edge_manager:1.1::el10"], "defaultStatus": "affected", "packageName": "rhem/flightctl-ui-ocp-rhel10", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784194938", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:edge_manager:1.1::el10"], "defaultStatus": "affected", "packageName": "rhem/flightctl-ui-rhel10", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784194574", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:edge_manager:1.1::el9"], "defaultStatus": "affected", "packageName": "rhem/flightctl-ui-ocp-rhel9", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784126822", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:edge_manager:1.1::el9"], "defaultStatus": "affected", "packageName": "rhem/flightctl-ui-rhel9", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784127736", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhmt:1.8::el8"], "defaultStatus": "affected", "packageName": "rhmtc/openshift-migration-ui-rhel8", "product": "Red Hat Migration Toolkit 1.8", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783690532", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "defaultStatus": "affected", "packageName": "rhoai/odh-dashboard-rhel9", "product": "Red Hat OpenShift AI 2.25", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1780467029", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "defaultStatus": "affected", "packageName": "rhoai/odh-mod-arch-model-registry-rhel9", "product": "Red Hat OpenShift AI 2.25", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1780467147", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:3.3::el9"], "defaultStatus": "affected", "packageName": "rhoai/odh-dashboard-rhel9", "product": "Red Hat OpenShift AI 3.3", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779189627", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:3.3::el9"], "defaultStatus": "affected", "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9", "product": "Red Hat OpenShift AI 3.3", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1778473763", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:3.3::el9"], "defaultStatus": "affected", "packageName": "rhoai/odh-mod-arch-model-registry-rhel9", "product": "Red Hat OpenShift AI 3.3", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1778666987", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.12::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console", "product": "Red Hat OpenShift Container Platform 4.12", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782276534", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.13::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console", "product": "Red Hat OpenShift Container Platform 4.13", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055834", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.14::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console", "product": "Red Hat OpenShift Container Platform 4.14", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782157414", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.15::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console", "product": "Red Hat OpenShift Container Platform 4.15", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782127091", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.16::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-monitoring-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.16", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779262817", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.16::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-networking-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.16", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1778615276", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.16::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console-rhel9", "product": "Red Hat OpenShift Container Platform 4.16", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783306715", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.17::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-networking-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.17", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1778517109", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.17::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console-rhel9", "product": "Red Hat OpenShift Container Platform 4.17", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782240573", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.17::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-monitoring-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.17", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782240332", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.17::el9"], "defaultStatus": "affected", "packageName": "openshift4/nmstate-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.17", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782269794", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.18::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-networking-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777459211", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.18::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-monitoring-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779874891", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.18::el9"], "defaultStatus": "affected", "packageName": "openshift4/nmstate-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779874967", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.18::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console-rhel9", "product": "Red Hat OpenShift Container Platform 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782259588", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.19::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-networking-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779256322", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.19::el9"], "defaultStatus": "affected", "packageName": "openshift4/nmstate-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779249920", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.19::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-monitoring-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1780503846", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.19::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console-rhel9", "product": "Red Hat OpenShift Container Platform 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782171676", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.20::el9"], "defaultStatus": "affected", "packageName": "openshift4/nmstate-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1778645008", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.20::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-monitoring-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779863939", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.20::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console-rhel9", "product": "Red Hat OpenShift Container Platform 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1781688743", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.21::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-monitoring-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.21", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779266006", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/cephcsi-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676191", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/cephcsi-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783929816", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/mcg-core-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784094353", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/mcg-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784093953", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-client-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784094943", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-client-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676585", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-metrics-exporter-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676649", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676675", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cli-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784094299", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784094725", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cosi-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676820", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-csi-addons-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676883", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676894", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-multicluster-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784095175", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-multicluster-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676977", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-must-gather-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784093503", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783677297", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odr-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783677345", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/rook-ceph-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783677533", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/cephcsi-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684360", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/cephcsi-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684068", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/mcg-core-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784054582", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/mcg-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784054606", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-client-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055295", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-client-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684603", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-metrics-exporter-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684668", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684667", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cli-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784054873", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cloudnative-pg-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684707", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055589", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cosi-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684779", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-csi-addons-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684831", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684839", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-multicluster-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055533", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-multicluster-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055558", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-must-gather-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784056134", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783685128", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odr-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783685129", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/rook-ceph-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783685375", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/cephcsi-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667125", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/cephcsi-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783666755", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/mcg-core-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784054598", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/mcg-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055387", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-client-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055726", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-client-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667517", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-metrics-exporter-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667577", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667611", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cli-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055020", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cloudnative-pg-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667641", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055586", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cosi-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667790", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-csi-addons-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667859", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667875", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-external-snapshotter-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667869", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667877", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-multicluster-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055576", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-multicluster-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055244", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-must-gather-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055382", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783668266", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odr-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783668288", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/rook-ceph-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783669219", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_pipelines:1.20::el9"], "defaultStatus": "affected", "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9", "product": "Red Hat OpenShift Pipelines 1.2", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779910201", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:2.6::el8"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-ossmc-rhel8", "product": "Red Hat OpenShift Service Mesh 2.6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776202125", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:2.6::el8"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-rhel8", "product": "Red Hat OpenShift Service Mesh 2.6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776191302", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.0::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-ossmc-rhel9", "product": "Red Hat OpenShift Service Mesh 3.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776151124", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.0::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-rhel9", "product": "Red Hat OpenShift Service Mesh 3.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776151272", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.1::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-ossmc-rhel9", "product": "Red Hat OpenShift Service Mesh 3.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776151106", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.1::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-rhel9", "product": "Red Hat OpenShift Service Mesh 3.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776151270", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.2::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-ossmc-rhel9", "product": "Red Hat OpenShift Service Mesh 3.2", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776155669", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.2::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-rhel9", "product": "Red Hat OpenShift Service Mesh 3.2", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776149682", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.3::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-ossmc-rhel9", "product": "Red Hat OpenShift Service Mesh 3.3", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776151134", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.3::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-rhel9", "product": "Red Hat OpenShift Service Mesh 3.3", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776151277", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.10::el8"], "defaultStatus": "affected", "packageName": "quay/quay-rhel8", "product": "Red Hat Quay 3.10", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776736910", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.12::el8"], "defaultStatus": "affected", "packageName": "quay/quay-rhel8", "product": "Red Hat Quay 3.12", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1775253092", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.15::el8"], "defaultStatus": "affected", "packageName": "quay/quay-rhel8", "product": "Red Hat Quay 3.15", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1775169219", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.16::el9"], "defaultStatus": "affected", "packageName": "quay/quay-rhel9", "product": "Red Hat Quay 3.16", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779204086", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.17::el9"], "defaultStatus": "affected", "packageName": "quay/quay-rhel9", "product": "Red Hat Quay 3.17", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779922205", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.9::el8"], "defaultStatus": "affected", "packageName": "quay/quay-rhel8", "product": "Red Hat Quay 3.9", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1775169218", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:satellite:6.18::el9"], "defaultStatus": "affected", "packageName": "satellite/iop-vulnerability-frontend-rhel9", "product": "Red Hat Satellite 6.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1781032495", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:satellite:6.18::el9"], "defaultStatus": "affected", "packageName": "satellite/iop-host-inventory-frontend-rhel9", "product": "Red Hat Satellite 6.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1780105179", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:logging:5"], "defaultStatus": "affected", "packageName": "openshift-logging/logging-view-plugin-rhel9", "product": "Logging Subsystem for Red Hat OpenShift", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:workload_availability_nhc:0"], "defaultStatus": "unaffected", "packageName": "workload-availability/node-healthcheck-must-gather-rhel9", "product": "Node HealthCheck Operator", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:workload_availability_nhc:0"], "defaultStatus": "unaffected", "packageName": "workload-availability/node-healthcheck-operator-bundle", "product": "Node HealthCheck Operator", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:workload_availability_nhc:0"], "defaultStatus": "unaffected", "packageName": "workload-availability/node-healthcheck-rhel9-operator", "product": "Node HealthCheck Operator", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:workload_availability_nhc:0"], "defaultStatus": "affected", "packageName": "workload-availability/node-remediation-console-rhel8", "product": "Node HealthCheck Operator", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:workload_availability_nhc:0"], "defaultStatus": "affected", "packageName": "workload-availability/node-remediation-console-rhel9", "product": "Node HealthCheck Operator", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_lightspeed"], "defaultStatus": "affected", "packageName": "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9", "product": "OpenShift Lightspeed", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_lightspeed"], "defaultStatus": "affected", "packageName": "openshift-lightspeed/lightspeed-console-plugin-rhel9", "product": "OpenShift Lightspeed", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_pipelines:1"], "defaultStatus": "affected", "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8", "product": "OpenShift Pipelines", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:service_mesh:3"], "defaultStatus": "unaffected", "packageName": "openshift-service-mesh/kiali-operator-bundle", "product": "OpenShift Service Mesh 3", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:service_mesh:3"], "defaultStatus": "unaffected", "packageName": "openshift-service-mesh/kiali-rhel9-operator", "product": "OpenShift Service Mesh 3", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp20/system", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp21/system", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp22/system", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp24/system", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp25/system", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp26/system", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp2/system-rhel7", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp2/system-rhel8", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp2/system-rhel9", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:ansible_automation_platform:2"], "defaultStatus": "affected", "packageName": "ansible-automation-platform/automation-dashboard-rhel9", "product": "Red Hat Ansible Automation Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:ansible_automation_platform:2"], "defaultStatus": "affected", "packageName": "ansible-automation-platform-tech-preview/automation-dashboard-rhel9", "product": "Red Hat Ansible Automation Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:service_registry:2"], "defaultStatus": "affected", "packageName": "io.apicurio-apicurio-registry", "product": "Red Hat build of Apicurio Registry 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:connectivity_link:1"], "defaultStatus": "affected", "packageName": "rhcl-1/rhcl-console-plugin-rhel9", "product": "Red Hat Connectivity Link 1", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:10"], "defaultStatus": "affected", "packageName": "grafana", "product": "Red Hat Enterprise Linux 10", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected", "packageName": "grafana", "product": "Red Hat Enterprise Linux 8", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected", "packageName": "mozjs60", "product": "Red Hat Enterprise Linux 8", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected", "packageName": "pcs", "product": "Red Hat Enterprise Linux 8", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "affected", "packageName": "gjs", "product": "Red Hat Enterprise Linux 9", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "affected", "packageName": "grafana", "product": "Red Hat Enterprise Linux 9", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_ai"], "defaultStatus": "unaffected", "packageName": "rhoai/odh-dashboard-rhel8", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_ai"], "defaultStatus": "unaffected", "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_ai"], "defaultStatus": "unaffected", "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_ai"], "defaultStatus": "unaffected", "packageName": "rhoai/odh-mlflow-rhel9", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_ai"], "defaultStatus": "affected", "packageName": "rhoai/odh-mod-arch-maas-rhel9", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift:4"], "defaultStatus": "unaffected", "packageName": "openshift4/ose-monitoring-plugin-rhel8", "product": "Red Hat OpenShift Container Platform 4", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_gitops:1"], "defaultStatus": "affected", "packageName": "openshift-gitops-1/argocd-rhel8", "product": "Red Hat OpenShift GitOps", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_gitops:1"], "defaultStatus": "affected", "packageName": "openshift-gitops-1/argocd-rhel9", "product": "Red Hat OpenShift GitOps", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_gitops:1"], "defaultStatus": "affected", "packageName": "openshift-gitops-1/console-plugin-rhel8", "product": "Red Hat OpenShift GitOps", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:container_native_virtualization:4"], "defaultStatus": "affected", "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9", "product": "Red Hat OpenShift Virtualization 4", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:satellite:6"], "defaultStatus": "affected", "packageName": "nodejs-connected-react-router", "product": "Red Hat Satellite 6", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:satellite:6"], "defaultStatus": "unaffected", "packageName": "nodejs-sass", "product": "Red Hat Satellite 6", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:ansible_portal:2"], "defaultStatus": "affected", "packageName": "ansible-automation-platform/automation-portal", "product": "Self-service automation portal 2", "vendor": "Red Hat"}], "datePublic": "2026-03-06T18:25:22.438Z", "descriptions": [{"lang": "en", "value": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS)."}], "metrics": [{"other": {"content": {"namespace": "https://access.redhat.com/security/updates/classification/", "value": "Important"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS"}], "problemTypes": [{"descriptions": [{"cweId": "CWE-915", "description": "Improperly Controlled Modification of Dynamically-Determined Object Attributes", "lang": "en", "type": "CWE"}]}], "references": [{"tags": ["vdb-entry", "x_refsource_REDHAT"], "url": "https://access.redhat.com/security/cve/CVE-2026-29063"}, {"name": "RHBZ#2445291", "tags": ["issue-tracking", "x_refsource_REDHAT"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"}, {"tags": ["x_sadp-csaf-vex"], "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29063.json"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:34342"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:19409"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:19410"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:6428"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:24473"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:36882"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:13548"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:13847"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:11070"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:11217"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:13791"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:13829"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:9742"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:13826"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:7329"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:36651"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:40945"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:40118"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:41928"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:24977"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:19712"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:34049"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:40022"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:28893"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:28964"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:36621"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:20088"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:34100"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:34099"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:17598"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:21658"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:29857"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:21657"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:12118"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:20042"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:29864"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:23246"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:20041"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:17469"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:27063"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:21703"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:20034"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:21931"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:8483"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:8484"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:8490"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:8491"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:8493"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:41941"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:41944"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:40984"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:11916"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:6720"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:6568"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:19375"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:22465"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:6926"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:26232"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:26225"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:13853"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:13542"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:9848"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:11858"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:8218"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:11414"}], "solutions": [{"lang": "en", "value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"}, {"lang": "en", "value": "RHSA-2026:19409: Migration Toolkit for Virtualization 2.1"}, {"lang": "en", "value": "RHSA-2026:19410: Migration Toolkit for Virtualization 2.9"}, {"lang": "en", "value": "RHSA-2026:6428: Network Observability (NETOBSERV) 1.11.0"}, {"lang": "en", "value": "RHSA-2026:24473: Network Observability (NETOBSERV) 1.12.2"}, {"lang": "en", "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"}, {"lang": "en", "value": "RHSA-2026:13548: Red Hat Advanced Cluster Management for Kubernetes 2.15"}, {"lang": "en", "value": "RHSA-2026:13847: Red Hat Advanced Cluster Management for Kubernetes 2.16"}, {"lang": "en", "value": "RHSA-2026:11070: Red Hat Advanced Cluster Security 4.8"}, {"lang": "en", "value": "RHSA-2026:11217: Red Hat Advanced Cluster Security 4.8"}, {"lang": "en", "value": "RHSA-2026:13791: Red Hat Advanced Cluster Security 4.9"}, {"lang": "en", "value": "RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10"}, {"lang": "en", "value": "RHSA-2026:9742: Red Hat Developer Hub 1.8"}, {"lang": "en", "value": "RHSA-2026:13826: Red Hat Developer Hub 1.9"}, {"lang": "en", "value": "RHSA-2026:7329: Red Hat Discovery 2"}, {"lang": "en", "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"}, {"lang": "en", "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"}, {"lang": "en", "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"}, {"lang": "en", "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"}, {"lang": "en", "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"}, {"lang": "en", "value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"}, {"lang": "en", "value": "RHSA-2026:34049: Red Hat OpenShift Container Platform 4.12"}, {"lang": "en", "value": "RHSA-2026:40022: Red Hat OpenShift Container Platform 4.13"}, {"lang": "en", "value": "RHSA-2026:28893: Red Hat OpenShift Container Platform 4.14"}, {"lang": "en", "value": "RHSA-2026:28964: Red Hat OpenShift Container Platform 4.15"}, {"lang": "en", "value": "RHSA-2026:36621: Red Hat OpenShift Container Platform 4.16"}, {"lang": "en", "value": "RHSA-2026:20088: Red Hat OpenShift Container Platform 4.16"}, {"lang": "en", "value": "RHSA-2026:34100: Red Hat OpenShift Container Platform 4.17"}, {"lang": "en", "value": "RHSA-2026:34099: Red Hat OpenShift Container Platform 4.17"}, {"lang": "en", "value": "RHSA-2026:17598: Red Hat OpenShift Container Platform 4.17"}, {"lang": "en", "value": "RHSA-2026:21658: Red Hat OpenShift Container Platform 4.18"}, {"lang": "en", "value": "RHSA-2026:29857: Red Hat OpenShift Container Platform 4.18"}, {"lang": "en", "value": "RHSA-2026:21657: Red Hat OpenShift Container Platform 4.18"}, {"lang": "en", "value": "RHSA-2026:12118: Red Hat OpenShift Container Platform 4.18"}, {"lang": "en", "value": "RHSA-2026:20042: Red Hat OpenShift Container Platform 4.19"}, {"lang": "en", "value": "RHSA-2026:29864: Red Hat OpenShift Container Platform 4.19"}, {"lang": "en", "value": "RHSA-2026:23246: Red Hat OpenShift Container Platform 4.19"}, {"lang": "en", "value": "RHSA-2026:20041: Red Hat OpenShift Container Platform 4.19"}, {"lang": "en", "value": "RHSA-2026:17469: Red Hat OpenShift Container Platform 4.20"}, {"lang": "en", "value": "RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20"}, {"lang": "en", "value": "RHSA-2026:21703: Red Hat OpenShift Container Platform 4.20"}, {"lang": "en", "value": "RHSA-2026:20034: Red Hat OpenShift Container Platform 4.21"}, {"lang": "en", "value": "RHSA-2026:21931: Red Hat OpenShift Pipelines 1.2"}, {"lang": "en", "value": "RHSA-2026:8483: Red Hat OpenShift Service Mesh 2.6"}, {"lang": "en", "value": "RHSA-2026:8484: Red Hat OpenShift Service Mesh 3.0"}, {"lang": "en", "value": "RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1"}, {"lang": "en", "value": "RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2"}, {"lang": "en", "value": "RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3"}, {"lang": "en", "value": "RHSA-2026:41941: Red Hat Openshift Data Foundation 4.18"}, {"lang": "en", "value": "RHSA-2026:41944: Red Hat Openshift Data Foundation 4.19"}, {"lang": "en", "value": "RHSA-2026:40984: Red Hat Openshift Data Foundation 4.20"}, {"lang": "en", "value": "RHSA-2026:11916: Red Hat Quay 3.10"}, {"lang": "en", "value": "RHSA-2026:6720: Red Hat Quay 3.12"}, {"lang": "en", "value": "RHSA-2026:6568: Red Hat Quay 3.15"}, {"lang": "en", "value": "RHSA-2026:19375: Red Hat Quay 3.16"}, {"lang": "en", "value": "RHSA-2026:22465: Red Hat Quay 3.17"}, {"lang": "en", "value": "RHSA-2026:6926: Red Hat Quay 3.9"}, {"lang": "en", "value": "RHSA-2026:26232: Red Hat Satellite 6.18"}, {"lang": "en", "value": "RHSA-2026:26225: Red Hat Satellite 6.18"}, {"lang": "en", "value": "RHSA-2026:13853: multicluster engine for Kubernetes 2.11"}, {"lang": "en", "value": "RHSA-2026:13542: multicluster engine for Kubernetes 2.1"}, {"lang": "en", "value": "RHSA-2026:9848: multicluster engine for Kubernetes 2.6"}, {"lang": "en", "value": "RHSA-2026:11858: multicluster engine for Kubernetes 2.7"}, {"lang": "en", "value": "RHSA-2026:8218: multicluster engine for Kubernetes 2.8"}, {"lang": "en", "value": "RHSA-2026:11414: multicluster engine for Kubernetes 2.9"}], "timeline": [{"lang": "en", "time": "2026-03-06T19:00:57.982Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2026-03-06T18:25:22.438Z", "value": "Made public."}], "title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution", "x_adpType": "supplier", "x_generator": {"engine": "sadp-cli 1.0.0"}, "providerMetadata": {"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "shortName": "redhat-SADP", "dateUpdated": "2026-09-10T12:05:01.255Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution", "metrics": [{"other": {"type": "Red Hat severity rating", "content": {"value": "Important", "namespace": "https://access.redhat.com/security/updates/classification/"}}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "vendor": "Red Hat", "product": "Cluster Observability Operator 1.5.0", "versions": [{"status": "unaffected", "version": "1782839279", "lessThan": "*", "versionType": "rpm"}], "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "vendor": "Red Hat", "product": "Cluster Observability Operator 1.5.0", "versions": [{"status": "unaffected", "version": "1782840539", "lessThan": "*", "versionType": "rpm"}], "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "vendor": "Red Hat", "product": "Cluster Observability Operator 1.5.0", "versions": [{"status": "unaffected", "version": "1782839996", "lessThan": "*", "versionType": "rpm"}], "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9"], "vendor": "Red Hat", "product": "Migration Toolkit for Virtualization 2.1", "versions": [{"status": "unaffected", "version": "1779139872", "lessThan": "*", "versionType": "rpm"}], "packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9"], "vendor": "Red Hat", "product": "Migration Toolkit for Virtualization 2.9", "versions": [{"status": "unaffected", "version": "1778927462", "lessThan": "*", "versionType": "rpm"}], "packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_engine:2.10::el9"], "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.1", "versions": [{"status": "unaffected", "version": "1777128790", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-engine/console-mce-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_engine:2.11::el9"], "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.11", "versions": [{"status": "unaffected", "version": "1777559392", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-engine/console-mce-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_engine:2.6::el9"], "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.6", "versions": [{"status": "unaffected", "version": "1776223790", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-engine/console-mce-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_engine:2.7::el9"], "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.7", "versions": [{"status": "unaffected", "version": "1777306226", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-engine/console-mce-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_engine:2.8::el9"], "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.8", "versions": [{"status": "unaffected", "version": "1775116156", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-engine/console-mce-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_engine:2.9::el9"], "vendor": "Red Hat", "product": "multicluster engine for Kubernetes 2.9", "versions": [{"status": "unaffected", "version": "1777301444", "lessThan": "*", "versionType": "rpm"}], "packageName": "multicluster-engine/console-mce-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:network_observ_optr:1.11::el9"], "vendor": "Red Hat", "product": "Network Observability (NETOBSERV) 1.11.0", "versions": [{"status": "unaffected", "version": "1774431617", "lessThan": "*", "versionType": "rpm"}], "packageName": "network-observability/network-observability-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:network_observ_optr:1.12::el9"], "vendor": "Red Hat", "product": "Network Observability (NETOBSERV) 1.12.2", "versions": [{"status": "unaffected", "version": "1780920979", "lessThan": "*", "versionType": "rpm"}], "packageName": "network-observability/network-observability-console-plugin-pf4-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:acm:2.14::el9"], "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14", "versions": [{"status": "unaffected", "version": "1783451729", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhacm2/console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:acm:2.15::el9"], "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15", "versions": [{"status": "unaffected", "version": "1776927126", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhacm2/console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:acm:2.16::el9"], "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16", "versions": [{"status": "unaffected", "version": "1777559387", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhacm2/console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:advanced_cluster_security:4.8::el8"], "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Security 4.8", "versions": [{"status": "unaffected", "version": "1777307791", "lessThan": "*", "versionType": "rpm"}], "packageName": "advanced-cluster-security/rhacs-main-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:advanced_cluster_security:4.9::el8"], "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Security 4.9", "versions": [{"status": "unaffected", "version": "1777986630", "lessThan": "*", "versionType": "rpm"}], "packageName": "advanced-cluster-security/rhacs-main-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:advanced_cluster_security:4.10::el8"], "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10", "versions": [{"status": "unaffected", "version": "1777976489", "lessThan": "*", "versionType": "rpm"}], "packageName": "advanced-cluster-security/rhacs-main-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhdh:1.8::el9"], "vendor": "Red Hat", "product": "Red Hat Developer Hub 1.8", "versions": [{"status": "unaffected", "version": "1776784286", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhdh/rhdh-hub-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhdh:1.9::el9"], "vendor": "Red Hat", "product": "Red Hat Developer Hub 1.9", "versions": [{"status": "unaffected", "version": "1777903262", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhdh/rhdh-hub-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:discovery:2::el9"], "vendor": "Red Hat", "product": "Red Hat Discovery 2", "versions": [{"status": "unaffected", "version": "1775675922", "lessThan": "*", "versionType": "rpm"}], "packageName": "discovery/discovery-ui-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:edge_manager:1.0::el9"], "vendor": "Red Hat", "product": "Red Hat Edge Manager 1.0", "versions": [{"status": "unaffected", "version": "1783502765", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhem/flightctl-ui-ocp-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:edge_manager:1.0::el9"], "vendor": "Red Hat", "product": "Red Hat Edge Manager 1.0", "versions": [{"status": "unaffected", "version": "1783502438", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhem/flightctl-ui-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:edge_manager:1.1::el10"], "vendor": "Red Hat", "product": "Red Hat Edge Manager 1.1", "versions": [{"status": "unaffected", "version": "1784194938", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhem/flightctl-ui-ocp-rhel10", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:edge_manager:1.1::el10"], "vendor": "Red Hat", "product": "Red Hat Edge Manager 1.1", "versions": [{"status": "unaffected", "version": "1784194574", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhem/flightctl-ui-rhel10", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:edge_manager:1.1::el9"], "vendor": "Red Hat", "product": "Red Hat Edge Manager 1.1", "versions": [{"status": "unaffected", "version": "1784126822", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhem/flightctl-ui-ocp-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:edge_manager:1.1::el9"], "vendor": "Red Hat", "product": "Red Hat Edge Manager 1.1", "versions": [{"status": "unaffected", "version": "1784127736", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhem/flightctl-ui-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhmt:1.8::el8"], "vendor": "Red Hat", "product": "Red Hat Migration Toolkit 1.8", "versions": [{"status": "unaffected", "version": "1783690532", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhmtc/openshift-migration-ui-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI 2.25", "versions": [{"status": "unaffected", "version": "1780467029", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhoai/odh-dashboard-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI 2.25", "versions": [{"status": "unaffected", "version": "1780467147", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhoai/odh-mod-arch-model-registry-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai:3.3::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI 3.3", "versions": [{"status": "unaffected", "version": "1779189627", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhoai/odh-dashboard-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai:3.3::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI 3.3", "versions": [{"status": "unaffected", "version": "1778473763", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai:3.3::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI 3.3", "versions": [{"status": "unaffected", "version": "1778666987", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhoai/odh-mod-arch-model-registry-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.12::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.12", "versions": [{"status": "unaffected", "version": "1782276534", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-console", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.13::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.13", "versions": [{"status": "unaffected", "version": "1784055834", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-console", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.14::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.14", "versions": [{"status": "unaffected", "version": "1782157414", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-console", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.15::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.15", "versions": [{"status": "unaffected", "version": "1782127091", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-console", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.16", "versions": [{"status": "unaffected", "version": "1779262817", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-monitoring-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.16", "versions": [{"status": "unaffected", "version": "1778615276", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-networking-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.16::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.16", "versions": [{"status": "unaffected", "version": "1783306715", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.17::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.17", "versions": [{"status": "unaffected", "version": "1778517109", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-networking-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.17::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.17", "versions": [{"status": "unaffected", "version": "1782240573", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.17::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.17", "versions": [{"status": "unaffected", "version": "1782240332", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-monitoring-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.17::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.17", "versions": [{"status": "unaffected", "version": "1782269794", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/nmstate-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.18", "versions": [{"status": "unaffected", "version": "1777459211", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-networking-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.18", "versions": [{"status": "unaffected", "version": "1779874891", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-monitoring-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.18", "versions": [{"status": "unaffected", "version": "1779874967", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/nmstate-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.18", "versions": [{"status": "unaffected", "version": "1782259588", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.19", "versions": [{"status": "unaffected", "version": "1779256322", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-networking-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.19", "versions": [{"status": "unaffected", "version": "1779249920", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/nmstate-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.19", "versions": [{"status": "unaffected", "version": "1780503846", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-monitoring-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.19", "versions": [{"status": "unaffected", "version": "1782171676", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.20", "versions": [{"status": "unaffected", "version": "1778645008", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/nmstate-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.20", "versions": [{"status": "unaffected", "version": "1779863939", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-monitoring-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.20", "versions": [{"status": "unaffected", "version": "1781688743", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4.21::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4.21", "versions": [{"status": "unaffected", "version": "1779266006", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift4/ose-monitoring-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1783676191", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/cephcsi-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1783929816", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/cephcsi-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1784094353", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-core-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1784093953", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1784094943", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1783676585", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1783676649", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-metrics-exporter-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1783676675", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1784094299", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cli-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1784094725", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1783676820", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cosi-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1783676883", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1783676894", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1784095175", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1783676977", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1784093503", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-must-gather-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1783677297", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1783677345", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odr-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.18", "versions": [{"status": "unaffected", "version": "1783677533", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/rook-ceph-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1783684360", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/cephcsi-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1783684068", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/cephcsi-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1784054582", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-core-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1784054606", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1784055295", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1783684603", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1783684668", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-metrics-exporter-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1783684667", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1784054873", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cli-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1783684707", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cloudnative-pg-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1784055589", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1783684779", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cosi-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1783684831", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1783684839", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1784055533", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1784055558", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1784056134", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-must-gather-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1783685128", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1783685129", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odr-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.19", "versions": [{"status": "unaffected", "version": "1783685375", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/rook-ceph-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1783667125", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/cephcsi-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1783666755", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/cephcsi-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1784054598", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-core-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1784055387", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/mcg-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1784055726", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1783667517", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-client-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1783667577", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-metrics-exporter-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1783667611", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/ocs-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1784055020", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cli-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1783667641", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cloudnative-pg-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1784055586", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1783667790", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-cosi-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1783667859", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1783667875", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1783667869", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-external-snapshotter-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1783667877", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1784055576", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-console-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1784055244", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-multicluster-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1784055382", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-must-gather-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1783668266", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odf-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1783668288", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/odr-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4.20", "versions": [{"status": "unaffected", "version": "1783669219", "lessThan": "*", "versionType": "rpm"}], "packageName": "odf4/rook-ceph-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_pipelines:1.20::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Pipelines 1.2", "versions": [{"status": "unaffected", "version": "1779910201", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:2.6::el8"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 2.6", "versions": [{"status": "unaffected", "version": "1776202125", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/kiali-ossmc-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:2.6::el8"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 2.6", "versions": [{"status": "unaffected", "version": "1776191302", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/kiali-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.0::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.0", "versions": [{"status": "unaffected", "version": "1776151124", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/kiali-ossmc-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.0::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.0", "versions": [{"status": "unaffected", "version": "1776151272", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/kiali-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.1::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.1", "versions": [{"status": "unaffected", "version": "1776151106", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/kiali-ossmc-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.1::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.1", "versions": [{"status": "unaffected", "version": "1776151270", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/kiali-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.2::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.2", "versions": [{"status": "unaffected", "version": "1776155669", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/kiali-ossmc-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.2::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.2", "versions": [{"status": "unaffected", "version": "1776149682", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/kiali-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.3::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.3", "versions": [{"status": "unaffected", "version": "1776151134", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/kiali-ossmc-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.3::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.3", "versions": [{"status": "unaffected", "version": "1776151277", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/kiali-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:quay:3.10::el8"], "vendor": "Red Hat", "product": "Red Hat Quay 3.10", "versions": [{"status": "unaffected", "version": "1776736910", "lessThan": "*", "versionType": "rpm"}], "packageName": "quay/quay-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:quay:3.12::el8"], "vendor": "Red Hat", "product": "Red Hat Quay 3.12", "versions": [{"status": "unaffected", "version": "1775253092", "lessThan": "*", "versionType": "rpm"}], "packageName": "quay/quay-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:quay:3.15::el8"], "vendor": "Red Hat", "product": "Red Hat Quay 3.15", "versions": [{"status": "unaffected", "version": "1775169219", "lessThan": "*", "versionType": "rpm"}], "packageName": "quay/quay-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:quay:3.16::el9"], "vendor": "Red Hat", "product": "Red Hat Quay 3.16", "versions": [{"status": "unaffected", "version": "1779204086", "lessThan": "*", "versionType": "rpm"}], "packageName": "quay/quay-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:quay:3.17::el9"], "vendor": "Red Hat", "product": "Red Hat Quay 3.17", "versions": [{"status": "unaffected", "version": "1779922205", "lessThan": "*", "versionType": "rpm"}], "packageName": "quay/quay-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:quay:3.9::el8"], "vendor": "Red Hat", "product": "Red Hat Quay 3.9", "versions": [{"status": "unaffected", "version": "1775169218", "lessThan": "*", "versionType": "rpm"}], "packageName": "quay/quay-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:satellite:6.18::el9"], "vendor": "Red Hat", "product": "Red Hat Satellite 6.18", "versions": [{"status": "unaffected", "version": "1781032495", "lessThan": "*", "versionType": "rpm"}], "packageName": "satellite/iop-vulnerability-frontend-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:satellite:6.18::el9"], "vendor": "Red Hat", "product": "Red Hat Satellite 6.18", "versions": [{"status": "unaffected", "version": "1780105179", "lessThan": "*", "versionType": "rpm"}], "packageName": "satellite/iop-host-inventory-frontend-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:logging:5"], "vendor": "Red Hat", "product": "Logging Subsystem for Red Hat OpenShift", "packageName": "openshift-logging/logging-view-plugin-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:workload_availability_nhc:0"], "vendor": "Red Hat", "product": "Node HealthCheck Operator", "packageName": "workload-availability/node-healthcheck-must-gather-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:workload_availability_nhc:0"], "vendor": "Red Hat", "product": "Node HealthCheck Operator", "packageName": "workload-availability/node-healthcheck-operator-bundle", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:workload_availability_nhc:0"], "vendor": "Red Hat", "product": "Node HealthCheck Operator", "packageName": "workload-availability/node-healthcheck-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:workload_availability_nhc:0"], "vendor": "Red Hat", "product": "Node HealthCheck Operator", "packageName": "workload-availability/node-remediation-console-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:workload_availability_nhc:0"], "vendor": "Red Hat", "product": "Node HealthCheck Operator", "packageName": "workload-availability/node-remediation-console-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_lightspeed"], "vendor": "Red Hat", "product": "OpenShift Lightspeed", "packageName": "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_lightspeed"], "vendor": "Red Hat", "product": "OpenShift Lightspeed", "packageName": "openshift-lightspeed/lightspeed-console-plugin-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_pipelines:1"], "vendor": "Red Hat", "product": "OpenShift Pipelines", "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3"], "vendor": "Red Hat", "product": "OpenShift Service Mesh 3", "packageName": "openshift-service-mesh/kiali-operator-bundle", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3"], "vendor": "Red Hat", "product": "OpenShift Service Mesh 3", "packageName": "openshift-service-mesh/kiali-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "vendor": "Red Hat", "product": "Red Hat 3scale API Management Platform 2", "packageName": "3scale-amp20/system", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "vendor": "Red Hat", "product": "Red Hat 3scale API Management Platform 2", "packageName": "3scale-amp21/system", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "vendor": "Red Hat", "product": "Red Hat 3scale API Management Platform 2", "packageName": "3scale-amp22/system", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "vendor": "Red Hat", "product": "Red Hat 3scale API Management Platform 2", "packageName": "3scale-amp24/system", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "vendor": "Red Hat", "product": "Red Hat 3scale API Management Platform 2", "packageName": "3scale-amp25/system", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "vendor": "Red Hat", "product": "Red Hat 3scale API Management Platform 2", "packageName": "3scale-amp26/system", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "vendor": "Red Hat", "product": "Red Hat 3scale API Management Platform 2", "packageName": "3scale-amp2/system-rhel7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "vendor": "Red Hat", "product": "Red Hat 3scale API Management Platform 2", "packageName": "3scale-amp2/system-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "vendor": "Red Hat", "product": "Red Hat 3scale API Management Platform 2", "packageName": "3scale-amp2/system-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2", "packageName": "ansible-automation-platform/automation-dashboard-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2", "packageName": "ansible-automation-platform-tech-preview/automation-dashboard-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_registry:2"], "vendor": "Red Hat", "product": "Red Hat build of Apicurio Registry 2", "packageName": "io.apicurio-apicurio-registry", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:connectivity_link:1"], "vendor": "Red Hat", "product": "Red Hat Connectivity Link 1", "packageName": "rhcl-1/rhcl-console-plugin-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "grafana", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "grafana", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "mozjs60", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "pcs", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "gjs", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "grafana", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-dashboard-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-mlflow-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-mod-arch-maas-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift4/ose-monitoring-plugin-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_gitops:1"], "vendor": "Red Hat", "product": "Red Hat OpenShift GitOps", "packageName": "openshift-gitops-1/argocd-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_gitops:1"], "vendor": "Red Hat", "product": "Red Hat OpenShift GitOps", "packageName": "openshift-gitops-1/argocd-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_gitops:1"], "vendor": "Red Hat", "product": "Red Hat OpenShift GitOps", "packageName": "openshift-gitops-1/console-plugin-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:container_native_virtualization:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Virtualization 4", "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:satellite:6"], "vendor": "Red Hat", "product": "Red Hat Satellite 6", "packageName": "nodejs-connected-react-router", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:satellite:6"], "vendor": "Red Hat", "product": "Red Hat Satellite 6", "packageName": "nodejs-sass", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:ansible_portal:2"], "vendor": "Red Hat", "product": "Self-service automation portal 2", "packageName": "ansible-automation-platform/automation-portal", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}], "timeline": [{"lang": "en", "time": "2026-03-06T19:00:57.982Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2026-03-06T18:25:22.438Z", "value": "Made public."}], "solutions": [{"lang": "en", "value": "RHSA-2026:34342: Cluster Observability Operator 1.5.0"}, {"lang": "en", "value": "RHSA-2026:19409: Migration Toolkit for Virtualization 2.1"}, {"lang": "en", "value": "RHSA-2026:19410: Migration Toolkit for Virtualization 2.9"}, {"lang": "en", "value": "RHSA-2026:6428: Network Observability (NETOBSERV) 1.11.0"}, {"lang": "en", "value": "RHSA-2026:24473: Network Observability (NETOBSERV) 1.12.2"}, {"lang": "en", "value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"}, {"lang": "en", "value": "RHSA-2026:13548: Red Hat Advanced Cluster Management for Kubernetes 2.15"}, {"lang": "en", "value": "RHSA-2026:13847: Red Hat Advanced Cluster Management for Kubernetes 2.16"}, {"lang": "en", "value": "RHSA-2026:11070: Red Hat Advanced Cluster Security 4.8"}, {"lang": "en", "value": "RHSA-2026:11217: Red Hat Advanced Cluster Security 4.8"}, {"lang": "en", "value": "RHSA-2026:13791: Red Hat Advanced Cluster Security 4.9"}, {"lang": "en", "value": "RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10"}, {"lang": "en", "value": "RHSA-2026:9742: Red Hat Developer Hub 1.8"}, {"lang": "en", "value": "RHSA-2026:13826: Red Hat Developer Hub 1.9"}, {"lang": "en", "value": "RHSA-2026:7329: Red Hat Discovery 2"}, {"lang": "en", "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"}, {"lang": "en", "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"}, {"lang": "en", "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"}, {"lang": "en", "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"}, {"lang": "en", "value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"}, {"lang": "en", "value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"}, {"lang": "en", "value": "RHSA-2026:34049: Red Hat OpenShift Container Platform 4.12"}, {"lang": "en", "value": "RHSA-2026:40022: Red Hat OpenShift Container Platform 4.13"}, {"lang": "en", "value": "RHSA-2026:28893: Red Hat OpenShift Container Platform 4.14"}, {"lang": "en", "value": "RHSA-2026:28964: Red Hat OpenShift Container Platform 4.15"}, {"lang": "en", "value": "RHSA-2026:36621: Red Hat OpenShift Container Platform 4.16"}, {"lang": "en", "value": "RHSA-2026:20088: Red Hat OpenShift Container Platform 4.16"}, {"lang": "en", "value": "RHSA-2026:34100: Red Hat OpenShift Container Platform 4.17"}, {"lang": "en", "value": "RHSA-2026:34099: Red Hat OpenShift Container Platform 4.17"}, {"lang": "en", "value": "RHSA-2026:17598: Red Hat OpenShift Container Platform 4.17"}, {"lang": "en", "value": "RHSA-2026:21658: Red Hat OpenShift Container Platform 4.18"}, {"lang": "en", "value": "RHSA-2026:29857: Red Hat OpenShift Container Platform 4.18"}, {"lang": "en", "value": "RHSA-2026:21657: Red Hat OpenShift Container Platform 4.18"}, {"lang": "en", "value": "RHSA-2026:12118: Red Hat OpenShift Container Platform 4.18"}, {"lang": "en", "value": "RHSA-2026:20042: Red Hat OpenShift Container Platform 4.19"}, {"lang": "en", "value": "RHSA-2026:29864: Red Hat OpenShift Container Platform 4.19"}, {"lang": "en", "value": "RHSA-2026:23246: Red Hat OpenShift Container Platform 4.19"}, {"lang": "en", "value": "RHSA-2026:20041: Red Hat OpenShift Container Platform 4.19"}, {"lang": "en", "value": "RHSA-2026:17469: Red Hat OpenShift Container Platform 4.20"}, {"lang": "en", "value": "RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20"}, {"lang": "en", "value": "RHSA-2026:21703: Red Hat OpenShift Container Platform 4.20"}, {"lang": "en", "value": "RHSA-2026:20034: Red Hat OpenShift Container Platform 4.21"}, {"lang": "en", "value": "RHSA-2026:21931: Red Hat OpenShift Pipelines 1.2"}, {"lang": "en", "value": "RHSA-2026:8483: Red Hat OpenShift Service Mesh 2.6"}, {"lang": "en", "value": "RHSA-2026:8484: Red Hat OpenShift Service Mesh 3.0"}, {"lang": "en", "value": "RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1"}, {"lang": "en", "value": "RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2"}, {"lang": "en", "value": "RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3"}, {"lang": "en", "value": "RHSA-2026:41941: Red Hat Openshift Data Foundation 4.18"}, {"lang": "en", "value": "RHSA-2026:41944: Red Hat Openshift Data Foundation 4.19"}, {"lang": "en", "value": "RHSA-2026:40984: Red Hat Openshift Data Foundation 4.20"}, {"lang": "en", "value": "RHSA-2026:11916: Red Hat Quay 3.10"}, {"lang": "en", "value": "RHSA-2026:6720: Red Hat Quay 3.12"}, {"lang": "en", "value": "RHSA-2026:6568: Red Hat Quay 3.15"}, {"lang": "en", "value": "RHSA-2026:19375: Red Hat Quay 3.16"}, {"lang": "en", "value": "RHSA-2026:22465: Red Hat Quay 3.17"}, {"lang": "en", "value": "RHSA-2026:6926: Red Hat Quay 3.9"}, {"lang": "en", "value": "RHSA-2026:26232: Red Hat Satellite 6.18"}, {"lang": "en", "value": "RHSA-2026:26225: Red Hat Satellite 6.18"}, {"lang": "en", "value": "RHSA-2026:13853: multicluster engine for Kubernetes 2.11"}, {"lang": "en", "value": "RHSA-2026:13542: multicluster engine for Kubernetes 2.1"}, {"lang": "en", "value": "RHSA-2026:9848: multicluster engine for Kubernetes 2.6"}, {"lang": "en", "value": "RHSA-2026:11858: multicluster engine for Kubernetes 2.7"}, {"lang": "en", "value": "RHSA-2026:8218: multicluster engine for Kubernetes 2.8"}, {"lang": "en", "value": "RHSA-2026:11414: multicluster engine for Kubernetes 2.9"}], "x_adpType": "supplier", "datePublic": "2026-03-06T18:25:22.438Z", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-29063", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291", "name": "RHBZ#2445291", "tags": ["issue-tracking", "x_refsource_REDHAT"]}, {"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29063.json", "tags": ["x_sadp-csaf-vex"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:34342", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:19409", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:19410", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:6428", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:24473", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:36882", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:13548", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:13847", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:11070", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:11217", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:13791", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:13829", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:9742", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:13826", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:7329", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:36651", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:40945", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:40118", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:41928", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:24977", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:19712", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:34049", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:40022", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:28893", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:28964", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:36621", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:20088", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:34100", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:34099", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:17598", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:21658", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:29857", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:21657", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:12118", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:20042", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:29864", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:23246", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:20041", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:17469", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:27063", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:21703", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:20034", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:21931", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:8483", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:8484", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:8490", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:8491", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:8493", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:41941", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:41944", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:40984", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:11916", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:6720", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:6568", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:19375", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:22465", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:6926", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:26232", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:26225", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:13853", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:13542", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:9848", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:11858", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:8218", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:11414", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}], "x_generator": {"engine": "sadp-cli 1.0.0"}, "descriptions": [{"lang": "en", "value": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS)."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-915", "description": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"}]}], "providerMetadata": {"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "shortName": "redhat-SADP", "dateUpdated": "2026-09-10T12:05:01.255Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-29063", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-06T19:32:37.694711Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-06T19:32:46.434Z"}}], "cna": {"title": "Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable", "source": {"advisory": "GHSA-wf6x-7x77-mvgw", "discovery": "UNKNOWN"}, "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 8.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH"}}], "affected": [{"vendor": "immutable-js", "product": "immutable-js", "versions": [{"status": "affected", "version": "< 3.8.3"}, {"status": "affected", "version": "< 4.3.7"}, {"status": "affected", "version": "< 5.1.5"}]}], "references": [{"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw", "name": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3", "name": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8", "name": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5", "name": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1321", "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-06T18:25:22.438Z"}}}, "cveMetadata": {"cveId": "CVE-2026-29063", "state": "PUBLISHED", "dateUpdated": "2026-09-10T12:05:01.255Z", "dateReserved": "2026-03-03T20:51:43.481Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-03-06T18:25:22.438Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "immutable-js", "vendor": "immutable-js", "versions": [{"status": "affected", "version": "< 3.8.3"}, {"status": "affected", "version": "< 4.3.7"}, {"status": "affected", "version": "< 5.1.5"}]}], "source": "security-advisories@github.com"}, {"affectedData": [{"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "defaultStatus": "affected", "packageName": "cluster-observability-operator/logging-console-plugin-pf4-rhel9", "product": "Cluster Observability Operator 1.5.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782839279", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "defaultStatus": "affected", "packageName": "cluster-observability-operator/logging-console-plugin-pf5-rhel9", "product": "Cluster Observability Operator 1.5.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782840539", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:cluster_observability_operator:1.5::el9"], "defaultStatus": "affected", "packageName": "cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9", "product": "Cluster Observability Operator 1.5.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782839996", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9"], "defaultStatus": "affected", "packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9", "product": "Migration Toolkit for Virtualization 2.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779139872", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9"], "defaultStatus": "affected", "packageName": "migration-toolkit-virtualization/mtv-console-plugin-rhel9", "product": "Migration Toolkit for Virtualization 2.9", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1778927462", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_engine:2.10::el9"], "defaultStatus": "affected", "packageName": "multicluster-engine/console-mce-rhel9", "product": "multicluster engine for Kubernetes 2.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777128790", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_engine:2.11::el9"], "defaultStatus": "affected", "packageName": "multicluster-engine/console-mce-rhel9", "product": "multicluster engine for Kubernetes 2.11", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777559392", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_engine:2.6::el9"], "defaultStatus": "affected", "packageName": "multicluster-engine/console-mce-rhel9", "product": "multicluster engine for Kubernetes 2.6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776223790", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_engine:2.7::el9"], "defaultStatus": "affected", "packageName": "multicluster-engine/console-mce-rhel9", "product": "multicluster engine for Kubernetes 2.7", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777306226", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_engine:2.8::el9"], "defaultStatus": "affected", "packageName": "multicluster-engine/console-mce-rhel9", "product": "multicluster engine for Kubernetes 2.8", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1775116156", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multicluster_engine:2.9::el9"], "defaultStatus": "affected", "packageName": "multicluster-engine/console-mce-rhel9", "product": "multicluster engine for Kubernetes 2.9", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777301444", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:network_observ_optr:1.11::el9"], "defaultStatus": "affected", "packageName": "network-observability/network-observability-console-plugin-rhel9", "product": "Network Observability (NETOBSERV) 1.11.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1774431617", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:network_observ_optr:1.12::el9"], "defaultStatus": "affected", "packageName": "network-observability/network-observability-console-plugin-pf4-rhel9", "product": "Network Observability (NETOBSERV) 1.12.2", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1780920979", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:acm:2.14::el9"], "defaultStatus": "affected", "packageName": "rhacm2/console-rhel9", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.14", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783451729", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:acm:2.15::el9"], "defaultStatus": "affected", "packageName": "rhacm2/console-rhel9", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776927126", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:acm:2.16::el9"], "defaultStatus": "affected", "packageName": "rhacm2/console-rhel9", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777559387", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:advanced_cluster_security:4.8::el8"], "defaultStatus": "affected", "packageName": "advanced-cluster-security/rhacs-main-rhel8", "product": "Red Hat Advanced Cluster Security 4.8", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777307791", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:advanced_cluster_security:4.9::el8"], "defaultStatus": "affected", "packageName": "advanced-cluster-security/rhacs-main-rhel8", "product": "Red Hat Advanced Cluster Security 4.9", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777986630", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:advanced_cluster_security:4.10::el8"], "defaultStatus": "affected", "packageName": "advanced-cluster-security/rhacs-main-rhel8", "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777976489", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhdh:1.8::el9"], "defaultStatus": "affected", "packageName": "rhdh/rhdh-hub-rhel9", "product": "Red Hat Developer Hub 1.8", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776784286", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhdh:1.9::el9"], "defaultStatus": "affected", "packageName": "rhdh/rhdh-hub-rhel9", "product": "Red Hat Developer Hub 1.9", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777903262", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:discovery:2::el9"], "defaultStatus": "affected", "packageName": "discovery/discovery-ui-rhel9", "product": "Red Hat Discovery 2", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1775675922", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:edge_manager:1.0::el9"], "defaultStatus": "affected", "packageName": "rhem/flightctl-ui-ocp-rhel9", "product": "Red Hat Edge Manager 1.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783502765", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:edge_manager:1.0::el9"], "defaultStatus": "affected", "packageName": "rhem/flightctl-ui-rhel9", "product": "Red Hat Edge Manager 1.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783502438", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:edge_manager:1.1::el10"], "defaultStatus": "affected", "packageName": "rhem/flightctl-ui-ocp-rhel10", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784194938", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:edge_manager:1.1::el10"], "defaultStatus": "affected", "packageName": "rhem/flightctl-ui-rhel10", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784194574", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:edge_manager:1.1::el9"], "defaultStatus": "affected", "packageName": "rhem/flightctl-ui-ocp-rhel9", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784126822", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:edge_manager:1.1::el9"], "defaultStatus": "affected", "packageName": "rhem/flightctl-ui-rhel9", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784127736", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhmt:1.8::el8"], "defaultStatus": "affected", "packageName": "rhmtc/openshift-migration-ui-rhel8", "product": "Red Hat Migration Toolkit 1.8", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783690532", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "defaultStatus": "affected", "packageName": "rhoai/odh-dashboard-rhel9", "product": "Red Hat OpenShift AI 2.25", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1780467029", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "defaultStatus": "affected", "packageName": "rhoai/odh-mod-arch-model-registry-rhel9", "product": "Red Hat OpenShift AI 2.25", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1780467147", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:3.3::el9"], "defaultStatus": "affected", "packageName": "rhoai/odh-dashboard-rhel9", "product": "Red Hat OpenShift AI 3.3", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779189627", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:3.3::el9"], "defaultStatus": "affected", "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9", "product": "Red Hat OpenShift AI 3.3", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1778473763", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:3.3::el9"], "defaultStatus": "affected", "packageName": "rhoai/odh-mod-arch-model-registry-rhel9", "product": "Red Hat OpenShift AI 3.3", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1778666987", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.12::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console", "product": "Red Hat OpenShift Container Platform 4.12", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782276534", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.13::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console", "product": "Red Hat OpenShift Container Platform 4.13", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055834", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.14::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console", "product": "Red Hat OpenShift Container Platform 4.14", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782157414", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.15::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console", "product": "Red Hat OpenShift Container Platform 4.15", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782127091", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.16::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-monitoring-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.16", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779262817", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.16::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-networking-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.16", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1778615276", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.16::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console-rhel9", "product": "Red Hat OpenShift Container Platform 4.16", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783306715", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.17::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-networking-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.17", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1778517109", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.17::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console-rhel9", "product": "Red Hat OpenShift Container Platform 4.17", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782240573", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.17::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-monitoring-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.17", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782240332", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.17::el9"], "defaultStatus": "affected", "packageName": "openshift4/nmstate-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.17", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782269794", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.18::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-networking-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1777459211", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.18::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-monitoring-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779874891", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.18::el9"], "defaultStatus": "affected", "packageName": "openshift4/nmstate-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779874967", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.18::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console-rhel9", "product": "Red Hat OpenShift Container Platform 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782259588", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.19::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-networking-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779256322", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.19::el9"], "defaultStatus": "affected", "packageName": "openshift4/nmstate-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779249920", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.19::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-monitoring-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1780503846", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.19::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console-rhel9", "product": "Red Hat OpenShift Container Platform 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1782171676", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.20::el9"], "defaultStatus": "affected", "packageName": "openshift4/nmstate-console-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1778645008", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.20::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-monitoring-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779863939", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.20::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-console-rhel9", "product": "Red Hat OpenShift Container Platform 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1781688743", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4.21::el9"], "defaultStatus": "affected", "packageName": "openshift4/ose-monitoring-plugin-rhel9", "product": "Red Hat OpenShift Container Platform 4.21", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779266006", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/cephcsi-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676191", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/cephcsi-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783929816", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/mcg-core-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784094353", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/mcg-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784093953", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-client-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784094943", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-client-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676585", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-metrics-exporter-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676649", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676675", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cli-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784094299", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784094725", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cosi-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676820", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-csi-addons-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676883", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676894", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-multicluster-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784095175", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-multicluster-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783676977", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-must-gather-rhel9", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784093503", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783677297", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/odr-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783677345", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.18::el9"], "defaultStatus": "affected", "packageName": "odf4/rook-ceph-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783677533", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/cephcsi-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684360", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/cephcsi-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684068", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/mcg-core-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784054582", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/mcg-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784054606", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-client-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055295", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-client-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684603", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-metrics-exporter-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684668", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684667", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cli-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784054873", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cloudnative-pg-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684707", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055589", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cosi-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684779", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-csi-addons-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684831", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783684839", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-multicluster-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055533", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-multicluster-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055558", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-must-gather-rhel9", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784056134", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783685128", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/odr-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783685129", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.19::el9"], "defaultStatus": "affected", "packageName": "odf4/rook-ceph-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.19", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783685375", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/cephcsi-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667125", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/cephcsi-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783666755", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/mcg-core-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784054598", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/mcg-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055387", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-client-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055726", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-client-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667517", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-metrics-exporter-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667577", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/ocs-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667611", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cli-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055020", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cloudnative-pg-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667641", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055586", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-cosi-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667790", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-csi-addons-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667859", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667875", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-external-snapshotter-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667869", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783667877", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-multicluster-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055576", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-multicluster-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055244", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-must-gather-rhel9", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1784055382", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odf-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783668266", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/odr-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783668288", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4.20::el9"], "defaultStatus": "affected", "packageName": "odf4/rook-ceph-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.20", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1783669219", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_pipelines:1.20::el9"], "defaultStatus": "affected", "packageName": "openshift-pipelines/pipelines-console-plugin-rhel9", "product": "Red Hat OpenShift Pipelines 1.2", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779910201", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:2.6::el8"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-ossmc-rhel8", "product": "Red Hat OpenShift Service Mesh 2.6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776202125", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:2.6::el8"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-rhel8", "product": "Red Hat OpenShift Service Mesh 2.6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776191302", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.0::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-ossmc-rhel9", "product": "Red Hat OpenShift Service Mesh 3.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776151124", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.0::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-rhel9", "product": "Red Hat OpenShift Service Mesh 3.0", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776151272", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.1::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-ossmc-rhel9", "product": "Red Hat OpenShift Service Mesh 3.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776151106", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.1::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-rhel9", "product": "Red Hat OpenShift Service Mesh 3.1", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776151270", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.2::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-ossmc-rhel9", "product": "Red Hat OpenShift Service Mesh 3.2", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776155669", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.2::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-rhel9", "product": "Red Hat OpenShift Service Mesh 3.2", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776149682", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.3::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-ossmc-rhel9", "product": "Red Hat OpenShift Service Mesh 3.3", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776151134", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.3::el9"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/kiali-rhel9", "product": "Red Hat OpenShift Service Mesh 3.3", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776151277", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.10::el8"], "defaultStatus": "affected", "packageName": "quay/quay-rhel8", "product": "Red Hat Quay 3.10", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1776736910", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.12::el8"], "defaultStatus": "affected", "packageName": "quay/quay-rhel8", "product": "Red Hat Quay 3.12", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1775253092", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.15::el8"], "defaultStatus": "affected", "packageName": "quay/quay-rhel8", "product": "Red Hat Quay 3.15", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1775169219", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.16::el9"], "defaultStatus": "affected", "packageName": "quay/quay-rhel9", "product": "Red Hat Quay 3.16", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779204086", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.17::el9"], "defaultStatus": "affected", "packageName": "quay/quay-rhel9", "product": "Red Hat Quay 3.17", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1779922205", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.9::el8"], "defaultStatus": "affected", "packageName": "quay/quay-rhel8", "product": "Red Hat Quay 3.9", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1775169218", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:satellite:6.18::el9"], "defaultStatus": "affected", "packageName": "satellite/iop-vulnerability-frontend-rhel9", "product": "Red Hat Satellite 6.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1781032495", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:satellite:6.18::el9"], "defaultStatus": "affected", "packageName": "satellite/iop-host-inventory-frontend-rhel9", "product": "Red Hat Satellite 6.18", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "1780105179", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:logging:5"], "defaultStatus": "affected", "packageName": "openshift-logging/logging-view-plugin-rhel9", "product": "Logging Subsystem for Red Hat OpenShift", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:workload_availability_nhc:0"], "defaultStatus": "unaffected", "packageName": "workload-availability/node-healthcheck-must-gather-rhel9", "product": "Node HealthCheck Operator", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:workload_availability_nhc:0"], "defaultStatus": "unaffected", "packageName": "workload-availability/node-healthcheck-operator-bundle", "product": "Node HealthCheck Operator", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:workload_availability_nhc:0"], "defaultStatus": "unaffected", "packageName": "workload-availability/node-healthcheck-rhel9-operator", "product": "Node HealthCheck Operator", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:workload_availability_nhc:0"], "defaultStatus": "affected", "packageName": "workload-availability/node-remediation-console-rhel8", "product": "Node HealthCheck Operator", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:workload_availability_nhc:0"], "defaultStatus": "affected", "packageName": "workload-availability/node-remediation-console-rhel9", "product": "Node HealthCheck Operator", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_lightspeed"], "defaultStatus": "affected", "packageName": "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9", "product": "OpenShift Lightspeed", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_lightspeed"], "defaultStatus": "affected", "packageName": "openshift-lightspeed/lightspeed-console-plugin-rhel9", "product": "OpenShift Lightspeed", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_pipelines:1"], "defaultStatus": "affected", "packageName": "openshift-pipelines/pipelines-console-plugin-rhel8", "product": "OpenShift Pipelines", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:service_mesh:3"], "defaultStatus": "unaffected", "packageName": "openshift-service-mesh/kiali-operator-bundle", "product": "OpenShift Service Mesh 3", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:service_mesh:3"], "defaultStatus": "unaffected", "packageName": "openshift-service-mesh/kiali-rhel9-operator", "product": "OpenShift Service Mesh 3", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp20/system", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp21/system", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp22/system", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp24/system", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp25/system", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp26/system", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp2/system-rhel7", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp2/system-rhel8", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:red_hat_3scale_amp:2"], "defaultStatus": "affected", "packageName": "3scale-amp2/system-rhel9", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:ansible_automation_platform:2"], "defaultStatus": "affected", "packageName": "ansible-automation-platform/automation-dashboard-rhel9", "product": "Red Hat Ansible Automation Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:ansible_automation_platform:2"], "defaultStatus": "affected", "packageName": "ansible-automation-platform-tech-preview/automation-dashboard-rhel9", "product": "Red Hat Ansible Automation Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:service_registry:2"], "defaultStatus": "affected", "packageName": "io.apicurio-apicurio-registry", "product": "Red Hat build of Apicurio Registry 2", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:connectivity_link:1"], "defaultStatus": "affected", "packageName": "rhcl-1/rhcl-console-plugin-rhel9", "product": "Red Hat Connectivity Link 1", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:10"], "defaultStatus": "affected", "packageName": "grafana", "product": "Red Hat Enterprise Linux 10", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected", "packageName": "grafana", "product": "Red Hat Enterprise Linux 8", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected", "packageName": "mozjs60", "product": "Red Hat Enterprise Linux 8", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected", "packageName": "pcs", "product": "Red Hat Enterprise Linux 8", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "affected", "packageName": "gjs", "product": "Red Hat Enterprise Linux 9", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "affected", "packageName": "grafana", "product": "Red Hat Enterprise Linux 9", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_ai"], "defaultStatus": "unaffected", "packageName": "rhoai/odh-dashboard-rhel8", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_ai"], "defaultStatus": "unaffected", "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_ai"], "defaultStatus": "unaffected", "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_ai"], "defaultStatus": "unaffected", "packageName": "rhoai/odh-mlflow-rhel9", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_ai"], "defaultStatus": "affected", "packageName": "rhoai/odh-mod-arch-maas-rhel9", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift:4"], "defaultStatus": "unaffected", "packageName": "openshift4/ose-monitoring-plugin-rhel8", "product": "Red Hat OpenShift Container Platform 4", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_gitops:1"], "defaultStatus": "affected", "packageName": "openshift-gitops-1/argocd-rhel8", "product": "Red Hat OpenShift GitOps", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_gitops:1"], "defaultStatus": "affected", "packageName": "openshift-gitops-1/argocd-rhel9", "product": "Red Hat OpenShift GitOps", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:openshift_gitops:1"], "defaultStatus": "affected", "packageName": "openshift-gitops-1/console-plugin-rhel8", "product": "Red Hat OpenShift GitOps", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:container_native_virtualization:4"], "defaultStatus": "affected", "packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9", "product": "Red Hat OpenShift Virtualization 4", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:satellite:6"], "defaultStatus": "affected", "packageName": "nodejs-connected-react-router", "product": "Red Hat Satellite 6", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:satellite:6"], "defaultStatus": "unaffected", "packageName": "nodejs-sass", "product": "Red Hat Satellite 6", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:ansible_portal:2"], "defaultStatus": "affected", "packageName": "ansible-automation-platform/automation-portal", "product": "Self-service automation portal 2", "vendor": "Red Hat"}], "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:immutable-js:immutable:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "22FDF10C-08DC-4178-9F7C-D580C292885A", "versionEndExcluding": "3.8.3", "versionStartIncluding": "3.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:immutable-js:immutable:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "628095CE-A0C2-4E27-9642-D57C803AEC31", "versionEndExcluding": "4.3.8", "versionStartIncluding": "4.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:immutable-js:immutable:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "17E6FB8C-0F81-4EA4-B197-C08AB22253C3", "versionEndExcluding": "5.1.5", "versionStartIncluding": "5.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:redhat:3scale_api_management_platform:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "653A5B08-0D02-4362-A8B1-D00B24C6C6F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:*:*:*:*:*:*:*:*", "matchCriteriaId": "C9402725-25A9-4D52-9D79-5B13D576511F", "versionEndExcluding": "2.14.3", "versionStartIncluding": "2.14", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:*:*:*:*:*:*:*:*", "matchCriteriaId": "AF8BDDAE-C7EA-4552-885F-D2FD9E9700D8", "versionEndExcluding": "2.15.2", "versionStartIncluding": "2.15", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:*:*:*:*:*:*:*:*", "matchCriteriaId": "F26111E3-6BC5-4D96-B867-D4C45019B0CC", "versionEndExcluding": "2.16.1", "versionStartIncluding": "2.16", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:advanced_cluster_security:*:*:*:*:*:*:*:*", "matchCriteriaId": "77F7699D-8B02-439B-8034-14BB359CC5B1", "versionEndExcluding": "4.8.11", "versionStartIncluding": "4.8.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:advanced_cluster_security:*:*:*:*:*:*:*:*", "matchCriteriaId": "75177ED7-F27E-49F8-B0E5-CD1FE63C2132", "versionEndExcluding": "4.9.6", "versionStartIncluding": "4.9.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:advanced_cluster_security:*:*:*:*:*:kubernetes:*:*", "matchCriteriaId": "D25E0323-782D-4386-A4B5-387DAC970571", "versionEndExcluding": "4.10.2", "versionStartIncluding": "4.10.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:ansible_automation_platform:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "7B4BE2D6-43C3-4065-A213-5DB1325DC78F", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:build_of_apicurio_registry:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "050ED5A7-AAEF-483D-B18C-74259C4ECEF6", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:connectivity_link:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "BB2A5E6C-3F78-43DE-AA54-E0395219A666", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:developer_hub:*:*:*:*:*:*:*:*", "matchCriteriaId": "E594B6DA-73F3-4902-9EB1-17172907633A", "versionEndExcluding": "1.8.6", "versionStartIncluding": "1.8.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:developer_hub:*:*:*:*:*:*:*:*", "matchCriteriaId": "CCA5DF8C-B7F4-4C64-B36A-7015984EEFB4", "versionEndExcluding": "1.9.4", "versionStartIncluding": "1.9.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:discovery:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "46C0E53D-07D5-48BF-8749-637DACF255A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:edge_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "217995E6-079A-4586-A56F-8D50462EF769", "versionEndExcluding": "1.0.3", "versionStartIncluding": "1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:edge_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "140038A4-F7D1-44AC-B95E-4556403892C6", "versionEndExcluding": "1.1.3", "versionStartIncluding": "1.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:logging_subsystem_for_red_hat_openshift:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF93A27E-AA2B-4C2E-9B8D-FE7267847326", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:migration_toolkit:1.8:*:*:*:*:*:*:*", "matchCriteriaId": "0F6BF62A-4D4A-4F30-92E4-6E11BE38D60C", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:migration_toolkit_for_virtualization:2.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "C77603DF-1A54-4D88-807C-B99719C48035", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:migration_toolkit_for_virtualization:2.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "031A58F1-6116-4C24-B11E-E64D851920EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:multicluster_engine_for_kubernetes:*:*:*:*:*:*:*:*", "matchCriteriaId": "AACBBC2F-2F53-4B9B-9A41-87FF73849187", "versionEndExcluding": "2.6.10", "versionStartIncluding": "2.6", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:multicluster_engine_for_kubernetes:*:*:*:*:*:*:*:*", "matchCriteriaId": "8CB2F52C-A46F-43EE-9B95-C357F929B4D6", "versionEndExcluding": "2.7.10", "versionStartIncluding": "2.7", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:multicluster_engine_for_kubernetes:*:*:*:*:*:*:*:*", "matchCriteriaId": "F09E3265-ABAF-4FBE-8B19-6BFB3AB17514", "versionEndExcluding": "2.8.5", "versionStartIncluding": "2.8", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:multicluster_engine_for_kubernetes:*:*:*:*:*:*:*:*", "matchCriteriaId": "2BDB4EE7-9D5C-469E-8F48-FEF53BDDE11C", "versionEndExcluding": "2.9.3", "versionStartIncluding": "2.9", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:multicluster_engine_for_kubernetes:*:*:*:*:*:*:*:*", "matchCriteriaId": "BF32B395-EB2D-40E5-BB43-CFC34EA7BCBD", "versionEndExcluding": "2.10.2", "versionStartIncluding": "2.10", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:multicluster_engine_for_kubernetes:*:*:*:*:*:*:*:*", "matchCriteriaId": "081ED2F4-8815-475E-B82A-CD1457DB6269", "versionEndExcluding": "2.11.1", "versionStartIncluding": "2.11", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:network_observability_operator:1.11.0:*:*:*:*:*:*:*", "matchCriteriaId": "CD34FDC9-07DD-4A28-A1D1-DD88BBEDA67C", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:network_observability_operator:1.12.3:*:*:*:*:*:*:*", "matchCriteriaId": "369B083B-A4F8-4731-881B-38BD983DFC5F", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_cluster_observability_operator:1.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "9487EEAD-51F1-4122-A223-8256232CC363", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*", "matchCriteriaId": "50C39DB0-B8B8-43A2-BAEB-9C308E01F975", "versionEndExcluding": "4.12.93", "versionStartIncluding": "4.12", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*", "matchCriteriaId": "EABFA1F7-24DD-4EEA-96FA-F29496CC591D", "versionEndExcluding": "4.13.69", "versionStartIncluding": "4.13", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*", "matchCriteriaId": "30CAF41A-3275-4BA1-819D-6B88742B5411", "versionEndExcluding": "4.14.68", "versionStartIncluding": "4.14", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*", "matchCriteriaId": "E13571EE-D169-421D-85E1-95ED590BCA0B", "versionEndExcluding": "4.15.66", "versionStartIncluding": "4.15", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*", "matchCriteriaId": "5C905459-AB55-448B-B8DF-A032FDD76B71", "versionEndExcluding": "4.16.63", "versionStartIncluding": "4.16", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*", "matchCriteriaId": "84FB302C-1DCB-4889-BA40-677965B83F4D", "versionEndExcluding": "4.17.54", "versionStartIncluding": "4.17", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*", "matchCriteriaId": "61DF713C-E43E-4F4E-ADBD-3B6AF39836AF", "versionEndExcluding": "4.18.39", "versionStartIncluding": "4.18", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*", "matchCriteriaId": "15093700-B707-4B87-87C4-98BA738827BE", "versionEndExcluding": "4.19.32", "versionStartIncluding": "4.19", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*", "matchCriteriaId": "2BEC250A-7494-42C9-BDF8-D4426F5FEFA9", "versionEndExcluding": "4.20.23", "versionStartIncluding": "4.20", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*", "matchCriteriaId": "0A3D71A2-1860-40A6-9B45-B4E9AA8BEB38", "versionEndExcluding": "4.21.17", "versionStartIncluding": "4.21", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*", "matchCriteriaId": "932D137F-528B-4526-9A89-CD59FA1AB0FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_data_foundation:*:*:*:*:*:*:*:*", "matchCriteriaId": "D5ADE471-B5B4-4B31-9C44-32F66AA52F40", "versionEndExcluding": "4.18.25", "versionStartIncluding": "4.18", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_data_foundation:*:*:*:*:*:*:*:*", "matchCriteriaId": "5E70997B-842C-4DEE-AB24-DCD4BC5D7F62", "versionEndExcluding": "4.19.20", "versionStartIncluding": "4.19", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_data_foundation:*:*:*:*:*:*:*:*", "matchCriteriaId": "B2748688-5900-4932-AF39-657749C89FF2", "versionEndExcluding": "4.20.15", "versionStartIncluding": "4.20", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_data_foundation:4.17:*:*:*:*:*:*:*", "matchCriteriaId": "A630154A-9F22-40CB-8ED7-92A39AE649F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_gitops:-:*:*:*:*:*:*:*", "matchCriteriaId": "C0AAA300-691A-4957-8B69-F6888CC971B1", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_lightspeed:-:*:*:*:*:*:*:*", "matchCriteriaId": "C34B05C8-C19C-497F-8E1D-8F6039CDB185", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_pipelines:*:*:*:*:*:*:*:*", "matchCriteriaId": "107E0CA0-8FE0-435B-802E-9F3B3995F858", "versionEndExcluding": "1.20.5", "versionStartIncluding": "1.20", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_service_mesh:2.6:*:*:*:*:*:*:*", "matchCriteriaId": "33BE2C38-ED30-46C7-A929-7CF315EE6ED7", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_service_mesh:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "2A502137-8A2C-42FC-A92C-0D99B26641B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_service_mesh:3.1:*:*:*:*:*:*:*", "matchCriteriaId": "829CC5DA-58CE-4C87-AD21-976088811324", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_service_mesh:3.2:*:*:*:*:*:*:*", "matchCriteriaId": "A5312E05-6149-4A96-8957-B5FA274EC5C2", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_service_mesh:3.3:*:*:*:*:*:*:*", "matchCriteriaId": "B21C3577-B9EE-4CD7-8D46-9C8D862A1CF5", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:openshift_virtualization:4:*:*:*:*:*:*:*", "matchCriteriaId": "9C877879-B84B-471C-80CF-0656521CA8AB", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:quay:*:*:*:*:*:*:*:*", "matchCriteriaId": "71AC70F6-61EF-4648-AF7F-BE2126840057", "versionEndExcluding": "3.9.20", "versionStartIncluding": "3.9.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:quay:*:*:*:*:*:*:*:*", "matchCriteriaId": "934CD67D-B76F-4F66-9FDA-0EC1D47376A9", "versionEndExcluding": "3.10.21", "versionStartIncluding": "3.10.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:quay:*:*:*:*:*:*:*:*", "matchCriteriaId": "C8213450-788D-4EDD-873E-CBCD9CAB8117", "versionEndExcluding": "3.12.16", "versionStartIncluding": "3.12.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:quay:*:*:*:*:*:*:*:*", "matchCriteriaId": "9A48B372-8495-4BC8-92B9-EC2649AEC2B9", "versionEndExcluding": "3.15.4", "versionStartIncluding": "3.15.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:quay:*:*:*:*:*:*:*:*", "matchCriteriaId": "C1F9265E-5CAA-422D-8DE8-9B55B870D759", "versionEndExcluding": "3.16.4", "versionStartIncluding": "3.16.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:quay:*:*:*:*:*:*:*:*", "matchCriteriaId": "2F202FF4-8F26-463A-8DEE-7C2939D6C731", "versionEndExcluding": "3.17.2", "versionStartIncluding": "3.17.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:quay:3.18.0:*:*:*:*:*:*:*", "matchCriteriaId": "5074527F-5AA6-4294-BB97-89502E97267A", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "848C92A9-0677-442B-8D52-A448F2019903", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:satellite:6.18:*:*:*:*:*:*:*", "matchCriteriaId": "C2205338-7476-46DC-ABB2-52F0BBAAD01D", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:self-service_automation_portal:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "84D893E6-CCBB-46B6-A169-BB87064BB856", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "7F6FB57C-2BC7-487C-96DD-132683AEB35D", "vulnerable": true}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*", "matchCriteriaId": "D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5."}, {"lang": "es", "value": "Immutable.js proporciona muchas estructuras de datos inmutables persistentes. Antes de las versiones 3.8.3, 4.3.7 y 5.1.5, la contaminaci\u00f3n de prototipos es posible en immutable a trav\u00e9s de las APIs mergeDeep(), mergeDeepWith(), merge(), Map.toJS() y Map.toObject(). Este problema ha sido parcheado en las versiones 3.8.3, 4.3.7 y 5.1.5."}], "id": "CVE-2026-29063", "lastModified": "2026-10-30T13:16:36.640", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-29063", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-06T19:32:37.694711Z", "version": "2.0.3"}}]}, "published": "2026-03-06T19:16:21.557", "references": [{"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"}, {"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"}, {"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:11070"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:11217"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:11414"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:11858"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:11916"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:12118"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:13542"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:13548"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:13791"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:13826"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:13829"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:13847"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:13853"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:17469"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:17598"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:19375"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:19409"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:19410"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:19712"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:20034"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:20041"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:20042"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:20088"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:21657"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:21658"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:21703"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:21931"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:22465"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:23246"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:24473"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:24977"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:26225"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:26232"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:27063"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:28893"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:28964"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:29857"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:29864"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:34049"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:34099"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:34100"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:34342"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:36621"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:36651"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:36882"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:40022"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:40118"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:40945"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:40984"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:41928"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:41941"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:41944"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:6428"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:6568"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:6720"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:6926"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:7329"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:8218"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:8483"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:8484"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:8490"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:8491"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:8493"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:9742"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2026:9848"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/security/cve/CVE-2026-29063"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "tags": ["Vendor Advisory"], "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29063.json"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1321"}], "source": "security-advisories@github.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-915"}], "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "type": "Secondary"}]}

{"bugzilla": {"description": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution", "id": "2445291", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-915", "details": ["Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.", "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS)."], "name": "CVE-2026-29063", "package_state": [{"cpe": "cpe:/a:redhat:logging:5", "fix_state": "Affected", "package_name": "openshift-logging/logging-view-plugin-rhel9", "product_name": "Logging Subsystem for Red Hat OpenShift"}, {"cpe": "cpe:/a:redhat:rhmt:1", "fix_state": "Affected", "package_name": "rhmtc/openshift-migration-ui-rhel8", "product_name": "Migration Toolkit for Containers"}, {"cpe": "cpe:/a:redhat:migration_toolkit_virtualization:2", "fix_state": "Affected", "package_name": "migration-toolkit-virtualization/mtv-console-plugin-rhel9", "product_name": "Migration Toolkit for Virtualization"}, {"cpe": "cpe:/a:redhat:migration_toolkit_virtualization:2", "fix_state": "Will not fix", "package_name": "mtv-candidate/mtv-console-plugin-rhel9", "product_name": "Migration Toolkit for Virtualization"}, {"cpe": "cpe:/a:redhat:multicluster_engine", "fix_state": "Affected", "package_name": "multicluster-engine/console-mce-rhel9", "product_name": "Multicluster Engine for Kubernetes"}, {"cpe": "cpe:/a:redhat:network_observ_optr:1", "fix_state": "Affected", "package_name": "network-observability/network-observability-console-plugin-compat-rhel9", "product_name": "Network Observability Operator"}, {"cpe": "cpe:/a:redhat:network_observ_optr:1", "fix_state": "Affected", "package_name": "network-observability/network-observability-console-plugin-rhel9", "product_name": "Network Observability Operator"}, {"cpe": "cpe:/a:redhat:workload_availability_nhc:0", "fix_state": "Affected", "package_name": "workload-availability/node-healthcheck-must-gather-rhel9", "product_name": "Node HealthCheck Operator"}, {"cpe": "cpe:/a:redhat:workload_availability_nhc:0", "fix_state": "Affected", "package_name": "workload-availability/node-healthcheck-operator-bundle", "product_name": "Node HealthCheck Operator"}, {"cpe": "cpe:/a:redhat:workload_availability_nhc:0", "fix_state": "Affected", "package_name": "workload-availability/node-healthcheck-rhel9-operator", "product_name": "Node HealthCheck Operator"}, {"cpe": "cpe:/a:redhat:workload_availability_nhc:0", "fix_state": "Affected", "package_name": "workload-availability/node-remediation-console-rhel8", "product_name": "Node HealthCheck Operator"}, {"cpe": "cpe:/a:redhat:workload_availability_nhc:0", "fix_state": "Affected", "package_name": "workload-availability/node-remediation-console-rhel9", "product_name": "Node HealthCheck Operator"}, {"cpe": "cpe:/a:redhat:openshift_lightspeed", "fix_state": "Affected", "package_name": "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9", "product_name": "OpenShift Lightspeed"}, {"cpe": "cpe:/a:redhat:openshift_lightspeed", "fix_state": "Affected", "package_name": "openshift-lightspeed/lightspeed-console-plugin-rhel9", "product_name": "OpenShift Lightspeed"}, {"cpe": "cpe:/a:redhat:openshift_pipelines:1", "fix_state": "Affected", "package_name": "openshift-pipelines/pipelines-console-plugin-rhel8", "product_name": "OpenShift Pipelines"}, {"cpe": "cpe:/a:redhat:openshift_pipelines:1", "fix_state": "Affected", "package_name": "openshift-pipelines/pipelines-console-plugin-rhel9", "product_name": "OpenShift Pipelines"}, {"cpe": "cpe:/a:redhat:service_mesh:2", "fix_state": "Affected", "package_name": "openshift-service-mesh/kiali-ossmc-rhel8", "product_name": "OpenShift Service Mesh 2"}, {"cpe": "cpe:/a:redhat:service_mesh:2", "fix_state": "Affected", "package_name": "openshift-service-mesh/kiali-rhel8", "product_name": "OpenShift Service Mesh 2"}, {"cpe": "cpe:/a:redhat:service_mesh:3", "fix_state": "Not affected", "package_name": "openshift-service-mesh/kiali-operator-bundle", "product_name": "OpenShift Service Mesh 3"}, {"cpe": "cpe:/a:redhat:service_mesh:3", "fix_state": "Affected", "package_name": "openshift-service-mesh/kiali-ossmc-rhel9", "product_name": "OpenShift Service Mesh 3"}, {"cpe": "cpe:/a:redhat:service_mesh:3", "fix_state": "Affected", "package_name": "openshift-service-mesh/kiali-rhel9", "product_name": "OpenShift Service Mesh 3"}, {"cpe": "cpe:/a:redhat:service_mesh:3", "fix_state": "Not affected", "package_name": "openshift-service-mesh/kiali-rhel9-operator", "product_name": "OpenShift Service Mesh 3"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Affected", "package_name": "3scale-amp20/system", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Affected", "package_name": "3scale-amp21/system", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Will not fix", "package_name": "3scale-amp22/system", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Will not fix", "package_name": "3scale-amp24/system", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Will not fix", "package_name": "3scale-amp25/system", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Will not fix", "package_name": "3scale-amp26/system", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Affected", "package_name": "3scale-amp2/system-rhel7", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Affected", "package_name": "3scale-amp2/system-rhel8", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:red_hat_3scale_amp:2", "fix_state": "Affected", "package_name": "3scale-amp2/system-rhel9", "product_name": "Red Hat 3scale API Management Platform 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Affected", "package_name": "rhacm2/console-rhel9", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:advanced_cluster_security:4", "fix_state": "Affected", "package_name": "advanced-cluster-security/rhacs-main-rhel8", "product_name": "Red Hat Advanced Cluster Security 4"}, {"cpe": "cpe:/a:redhat:ansible_automation_platform:2", "fix_state": "Affected", "package_name": "ansible-automation-platform/automation-dashboard-rhel9", "product_name": "Red Hat Ansible Automation Platform 2"}, {"cpe": "cpe:/a:redhat:ansible_automation_platform:2", "fix_state": "Affected", "package_name": "ansible-automation-platform-tech-preview/automation-dashboard-rhel9", "product_name": "Red Hat Ansible Automation Platform 2"}, {"cpe": "cpe:/a:redhat:service_registry:2", "fix_state": "Affected", "package_name": "io.apicurio-apicurio-registry", "product_name": "Red Hat build of Apicurio Registry 2"}, {"cpe": "cpe:/a:redhat:connectivity_link:1", "fix_state": "Affected", "package_name": "rhcl-1/rhcl-console-plugin-rhel9", "product_name": "Red Hat Connectivity Link 1"}, {"cpe": "cpe:/a:redhat:rhdh:1", "fix_state": "Affected", "package_name": "rhdh/rhdh-hub-rhel9", "product_name": "Red Hat Developer Hub"}, {"cpe": "cpe:/a:redhat:discovery:2::el9", "fix_state": "Affected", "package_name": "discovery/discovery-ui-rhel9", "product_name": "Red Hat Discovery 2"}, {"cpe": "cpe:/a:redhat:edge_manager:1", "fix_state": "Affected", "package_name": "rhem/flightctl-ui-ocp-rhel9", "product_name": "Red Hat Edge Manager 1"}, {"cpe": "cpe:/a:redhat:edge_manager:1", "fix_state": "Affected", "package_name": "rhem/flightctl-ui-rhel9", "product_name": "Red Hat Edge Manager 1"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "grafana", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "grafana", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "mozjs60", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "pcs", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "gjs", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "grafana", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Affected", "package_name": "rhoai/odh-dashboard-rhel8", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Affected", "package_name": "rhoai/odh-dashboard-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Affected", "package_name": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Affected", "package_name": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Not affected", "package_name": "rhoai/odh-mlflow-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Affected", "package_name": "rhoai/odh-mod-arch-gen-ai-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Affected", "package_name": "rhoai/odh-mod-arch-maas-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Affected", "package_name": "rhoai/odh-mod-arch-model-registry-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "package_name": "openshift4/nmstate-console-plugin-rhel9", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "package_name": "openshift4/ose-console", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "package_name": "openshift4/ose-console-rhel9", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "package_name": "openshift4/ose-monitoring-plugin-rhel8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "package_name": "openshift4/ose-monitoring-plugin-rhel9", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "package_name": "openshift4/ose-networking-console-plugin-rhel9", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift_data_foundation:4", "fix_state": "Affected", "package_name": "odf4/ocs-client-console-rhel9", "product_name": "Red Hat Openshift Data Foundation 4"}, {"cpe": "cpe:/a:redhat:openshift_data_foundation:4", "fix_state": "Affected", "package_name": "odf4/odf-console-rhel9", "product_name": "Red Hat Openshift Data Foundation 4"}, {"cpe": "cpe:/a:redhat:openshift_data_foundation:4", "fix_state": "Affected", "package_name": "odf4/odf-multicluster-console-rhel9", "product_name": "Red Hat Openshift Data Foundation 4"}, {"cpe": "cpe:/a:redhat:openshift_gitops:1", "fix_state": "Affected", "package_name": "openshift-gitops-1/argocd-rhel8", "product_name": "Red Hat OpenShift GitOps"}, {"cpe": "cpe:/a:redhat:openshift_gitops:1", "fix_state": "Affected", "package_name": "openshift-gitops-1/argocd-rhel9", "product_name": "Red Hat OpenShift GitOps"}, {"cpe": "cpe:/a:redhat:openshift_gitops:1", "fix_state": "Affected", "package_name": "openshift-gitops-1/console-plugin-rhel8", "product_name": "Red Hat OpenShift GitOps"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Affected", "package_name": "container-native-virtualization/kubevirt-console-plugin-rhel9", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:quay:3", "fix_state": "Affected", "package_name": "quay/quay-rhel8", "product_name": "Red Hat Quay 3"}, {"cpe": "cpe:/a:redhat:quay:3", "fix_state": "Affected", "package_name": "quay/quay-rhel9", "product_name": "Red Hat Quay 3"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Affected", "package_name": "nodejs-connected-react-router", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Affected", "package_name": "nodejs-sass", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Affected", "package_name": "satellite/iop-host-inventory-frontend-rhel9", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Affected", "package_name": "satellite/iop-vulnerability-frontend-rhel9", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:ansible_portal:2", "fix_state": "Affected", "package_name": "ansible-automation-platform/automation-portal", "product_name": "Self-service automation portal 2"}], "public_date": "2026-03-06T18:25:22Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-29063\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-29063\nhttps://github.com/immutable-js/immutable-js/releases/tag/v3.8.3\nhttps://github.com/immutable-js/immutable-js/releases/tag/v4.3.8\nhttps://github.com/immutable-js/immutable-js/releases/tag/v5.1.5\nhttps://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"], "statement": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,3.8.3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,4.3.7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,5.1.5)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "immutable-js", "source": "cna", "vendor": "immutable-js"}, "product": "immutable-js", "vendor": "immutable-js"}], "analysis": {"en": {"generated_at": "2026-04-16T11:15:47.814932+00:00", "value": {"mitigation_remediation": ["Upgrade Immutable.js to at least version 3.8.3, 4.3.7, or 5.1.5 depending on your current major release so that the prototype pollution fix is in place.", "Immediately remove or refactor any use of mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), or Map.toObject() that processes untrusted data; replace them with safer alternatives that do not alter Object.prototype.", "Implement input validation on any data that originates from external sources to ensure it cannot construct prototype properties before being passed to Immutable.js functions."], "summary": {"action": "Patch immediately", "impact": "Prototype pollution that permits unauthorized modification of Object.prototype"}, "threat_synthesis": {"affected_systems": "The vulnerability affects the Immutable.js library for JavaScript. Any installation using a version older than 3.8.3, 4.3.7, or 5.1.5 is susceptible. The issue was fixed in the corresponding release versions and all later updates.", "description_and_impact": "Immutable.js, a library for persistent immutable data structures, exposes a prototype pollution flaw in several APIs. Prior to releases 3.8.3, 4.3.7, and 5.1.5, functions such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() can alter properties on Object.prototype when fed crafted input. This uncontrolled change corresponds to CWE\u20111321 and could allow an attacker to inject malicious properties into every object created thereafter, undermining application integrity and potentially enabling denial\u2011of\u2011service.", "risk_and_exploitability": "The CVSS score is 8.7, placing this bug in the high severity range, while the EPSS score of less than 1\u202f% indicates a low likelihood of exploitation. It is not listed in the KEV catalog. Based on the description, the attack vector is likely any scenario where an attacker supplies crafted data to the vulnerable APIs, allowing them to modify the global prototype chain and potentially compromise application functionality."}}}}, "created": "2026-03-09T10:07:09.696267+00:00", "updated": "2026-04-16T11:30:15.892162+00:00", "vendors": ["immutable-js", "immutable-js$PRODUCT$immutable-js"]}