{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-42499", "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "state": "PUBLISHED", "assignerShortName": "Go", "dateReserved": "2026-04-28T00:21:12.791Z", "datePublished": "2026-05-07T19:41:18.615Z", "dateUpdated": "2026-08-18T12:05:35.369Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", "dateUpdated": "2026-05-07T19:41:18.615Z"}, "title": "Quadratic string concatenation in consumePhrase in net/mail", "descriptions": [{"lang": "en", "value": "Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322."}], "affected": [{"vendor": "Go standard library", "product": "net/mail", "collectionURL": "https://pkg.go.dev", "packageName": "net/mail", "versions": [{"version": "0", "lessThan": "1.25.10", "status": "affected", "versionType": "semver"}, {"version": "1.26.0-0", "lessThan": "1.26.3", "status": "affected", "versionType": "semver"}], "programRoutines": [{"name": "addrParser.consumePhrase"}, {"name": "AddressParser.Parse"}, {"name": "AddressParser.ParseList"}, {"name": "Header.AddressList"}, {"name": "ParseAddress"}, {"name": "ParseAddressList"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-407: Inefficient Algorithmic Complexity"}]}], "references": [{"url": "https://go.dev/issue/78987"}, {"url": "https://go.dev/cl/771520"}, {"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"}, {"url": "https://pkg.go.dev/vuln/GO-2026-4977"}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-05-08T16:55:28.873015Z", "id": "CVE-2026-42499", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-08T21:29:59.662Z"}}, {"affected": [{"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:assisted_installer:2"], "defaultStatus": "affected", "packageName": "rhai/assisted-installer-rhel9", "product": "Assisted Installer for Red Hat OpenShift Container Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:confidential_compute_attestation:1"], "defaultStatus": "affected", "packageName": "build-of-trustee/trustee-rhel9-operator", "product": "Confidential Compute Attestation", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:cryostat:4"], "defaultStatus": "affected", "packageName": "cryostat/cryostat-storage-rhel9", "product": "Cryostat 4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:external_secrets_operator:1"], "defaultStatus": "affected", "packageName": "external-secrets-operator/external-secrets-rhel9", "product": "External Secrets Operator for Red Hat OpenShift", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_file_integrity_operator:1"], "defaultStatus": "affected", "packageName": "compliance/openshift-compliance-operator-bundle", "product": "File Integrity Operator", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:lvms:4"], "defaultStatus": "affected", "packageName": "lvms4/lvms-rhel9-operator", "product": "Logical Volume Manager Storage", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multiarch_tuning_operator"], "defaultStatus": "affected", "packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator", "product": "Multiarch Tuning Operator", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_lightspeed"], "defaultStatus": "affected", "packageName": "openshift-lightspeed/lightspeed-rhel9-operator", "product": "OpenShift Lightspeed", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:2"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/pilot-rhel8", "product": "OpenShift Service Mesh 2", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3"], "defaultStatus": "affected", "packageName": "openshift-golang-builder-container", "product": "OpenShift Service Mesh 3", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_power_monitoring"], "defaultStatus": "affected", "packageName": "openshift-power-monitoring/power-monitoring-rhel9-operator", "product": "Power monitoring for Red Hat OpenShift", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:ceph_storage:5"], "defaultStatus": "affected", "packageName": "rhceph/rhceph-5-dashboard-rhel8", "product": "Red Hat Ceph Storage 5", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:ceph_storage:6"], "defaultStatus": "affected", "packageName": "rhceph/rhceph-6-dashboard-rhel9", "product": "Red Hat Ceph Storage 6", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:ceph_storage:9"], "defaultStatus": "affected", "packageName": "rhceph/alloy-rhel10", "product": "Red Hat Ceph Storage 9", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/o:redhat:enterprise_linux:10"], "defaultStatus": "affected", "packageName": "go-toolset", "product": "Red Hat Enterprise Linux 10", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "affected", "packageName": "go-toolset (go-toolset:rhel8)", "product": "Red Hat Enterprise Linux 8", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "affected", "packageName": "conmon", "product": "Red Hat Enterprise Linux 9", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai"], "defaultStatus": "affected", "packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_cluster_manager_cli:1"], "defaultStatus": "affected", "packageName": "ocm-cli-clients/ocm-cli-rhel9", "product": "Red Hat OpenShift Cluster Manager CLI", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4"], "defaultStatus": "affected", "packageName": "cri-o", "product": "Red Hat OpenShift Container Platform 4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4"], "defaultStatus": "affected", "packageName": "odf4/odf-cli-rhel9", "product": "Red Hat Openshift Data Foundation 4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_devspaces:3"], "defaultStatus": "affected", "packageName": "devspaces/configbump-rhel9", "product": "Red Hat OpenShift Dev Spaces", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:devworkspace"], "defaultStatus": "affected", "packageName": "devworkspace/devworkspace-rhel9-operator", "product": "Red Hat OpenShift Dev Workspaces Operator", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_distributed_tracing:3"], "defaultStatus": "affected", "packageName": "rhosdt/tempo-rhel9", "product": "Red Hat OpenShift distributed tracing 3", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_gitops:1"], "defaultStatus": "affected", "packageName": "openshift-gitops-1/argocd-rhel8", "product": "Red Hat OpenShift GitOps", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:container_native_virtualization:4"], "defaultStatus": "affected", "packageName": "openshift-golang-builder-container", "product": "Red Hat OpenShift Virtualization 4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3"], "defaultStatus": "affected", "packageName": "quay/quay-builder-rhel8", "product": "Red Hat Quay 3", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:trusted_artifact_signer:1"], "defaultStatus": "affected", "packageName": "rhtas/ec-rhel9", "product": "Red Hat Trusted Artifact Signer", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_security_profiles_operator:1"], "defaultStatus": "affected", "packageName": "compliance/openshift-security-profiles-rhel8-operator", "product": "Security Profiles Operator", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:zero_trust_workload_identity_manager:1"], "defaultStatus": "affected", "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9", "product": "Zero Trust Workload Identity Manager", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:zero_trust_workload_identity_manager:0"], "defaultStatus": "affected", "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9", "product": "Zero Trust Workload Identity Manager - Tech Preview", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:cert_manager:1.19::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64", "product": "Cert Manager support for Red Hat OpenShift release 1.19", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:logging:6.0::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64", "product": "Logging for Red Hat OpenShift 6.0", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:logging:6.2::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64", "product": "Logging for Red Hat OpenShift 6.2", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:logging:6.4::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:e5b7cc503692837c64463dec9b5f26d4041604af41687089e3d2fa7049d18763_amd64", "product": "Logging for Red Hat OpenShift 6.4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_api_data_protection:1.3::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64", "product": "OpenShift API for Data Protection 1.3", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_api_data_protection:1.6::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le", "product": "OpenShift API for Data Protection 1.6", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:advanced_cluster_security:4.9::el8"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64", "product": "Red Hat Advanced Cluster Security 4.9", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:advanced_cluster_security:4.10::el8"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64", "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhdh:1.10::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64", "product": "Red Hat Developer Hub 1.10", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhdh:1.9::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64", "product": "Red Hat Developer Hub 1.9", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:migration_toolkit_applications:8.1::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64", "product": "Red Hat Migration Toolkit for Applications 8.1", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:migration_toolkit_applications:8.2::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64", "product": "Red Hat Migration Toolkit for Applications 8.2", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhmt:1.8::el8"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64", "product": "Red Hat Migration Toolkit for Containers 1.8", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:0ba264bf70f053344047e3b1a535bf5b5547d57ef71dd6a7c7dc12b689840ba1_arm64", "product": "Red Hat OpenShift AI 2.25", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.0::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:5fdcc9c7b6ff9b4b099713c4d549128c12b335fb0c28154f631ba3e9f99c8f52_amd64", "product": "Red Hat OpenShift Service Mesh 3.0", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.1::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:2213bdf2e395c942887e916b0604dd177f3c7b25919a8fa6c4ea2246b33087ca_ppc64le", "product": "Red Hat OpenShift Service Mesh 3.1", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.2::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:6361c72a416f9c526cb8bd5302a09576ecb42783b5463373b4e1a156a853e7c7_amd64", "product": "Red Hat OpenShift Service Mesh 3.2", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.3::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:33b95627674ae3c2c861b608ed1774eebf0fb935ac68252607a47f85d08b2e9e_s390x", "product": "Red Hat OpenShift Service Mesh 3.3", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:workload_availability_nhc:0.12::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64", "product": "Red Hat OpenShift Workload Availability 0.12", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:workload_availability_snr:0.13::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64", "product": "Red Hat OpenShift Workload Availability 0.13", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:workload_availability_sbr:0.3::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x", "product": "Red Hat OpenShift Workload Availability 0.3", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:workload_availability_mdr:0.7::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64", "product": "Red Hat OpenShift Workload Availability 0.7", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:workload_availability_far:0.8::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64", "product": "Red Hat OpenShift Workload Availability 0.8", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:workload_availability_nmo:5.7::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64", "product": "Red Hat OpenShift Workload Availability 5.7", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.12::el8"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64", "product": "Red Hat Quay 3.12", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.15::el8"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x", "product": "Red Hat Quay 3.15", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.16::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le", "product": "Red Hat Quay 3.16", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.10::el8"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64", "product": "Red Hat Quay 3.1", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.9::el8"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x", "product": "Red Hat Quay 3.9", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:trusted_artifact_signer:1.4::el9"], "defaultStatus": "unaffected", "packageName": "conforma-cli-stack-v1-4@amd64", "product": "Red Hat Trusted Artifact Signer 1.4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"], "defaultStatus": "unaffected", "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9", "product": "Custom Metric Autoscaler operator for Red Hat Openshift", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:lvms:4"], "defaultStatus": "unaffected", "packageName": "lvms4/topolvm-rhel8", "product": "Logical Volume Manager Storage", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:network_observ_optr:1"], "defaultStatus": "unaffected", "packageName": "network-observability/network-observability-rhel9-operator", "product": "Network Observability Operator", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:2"], "defaultStatus": "unaffected", "packageName": "openshift-golang-builder-container", "product": "OpenShift Service Mesh 2", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai"], "defaultStatus": "unaffected", "packageName": "rhoai/odh-kueue-controller-rhel8", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4"], "defaultStatus": "unaffected", "packageName": "conmon", "product": "Red Hat OpenShift Container Platform 4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4"], "defaultStatus": "unaffected", "packageName": "ocs4/cephcsi-rhel8", "product": "Red Hat Openshift Data Foundation 4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:windows_machine_config"], "defaultStatus": "unaffected", "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator", "product": "Red Hat OpenShift for Windows Containers", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:container_native_virtualization:4"], "defaultStatus": "unaffected", "packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9", "product": "Red Hat OpenShift Virtualization 4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openstack:16.2"], "defaultStatus": "unaffected", "packageName": "rhosp-rhel8/osp-director-operator-bundle", "product": "Red Hat OpenStack Platform 16.2", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openstack:17.1"], "defaultStatus": "unaffected", "packageName": "rhosp-rhel9/osp-director-operator-bundle", "product": "Red Hat OpenStack Platform 17.1", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openstack:18.0"], "defaultStatus": "unaffected", "packageName": "rhoso-operators/ovn-rhel9-operator", "product": "Red Hat OpenStack Platform 18.0", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:hummingbird:1"], "defaultStatus": "unaffected", "packageName": "golang1-25-main@aarch64", "product": "Red Hat Hardened Images", "vendor": "Red Hat"}], "datePublic": "2026-05-07T19:41:18.615Z", "descriptions": [{"lang": "en", "value": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition."}], "metrics": [{"other": {"content": {"namespace": "https://access.redhat.com/security/updates/classification/", "value": "Important"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS"}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1046", "description": "Creation of Immutable Text Using String Concatenation", "lang": "en", "type": "CWE"}]}], "references": [{"tags": ["vdb-entry", "x_refsource_REDHAT"], "url": "https://access.redhat.com/security/cve/CVE-2026-42499"}, {"name": "RHBZ#2467809", "tags": ["issue-tracking", "x_refsource_REDHAT"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"}, {"tags": ["x_sadp-csaf-vex"], "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:54531"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:50843"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:47952"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:34364"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:51033"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:43692"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:36319"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:36625"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:36754"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:33574"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:17713"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:17714"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:50300"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:43038"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:41928"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:42644"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:33120"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:33123"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:33142"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:33150"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:54287"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:54284"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:54286"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:54285"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:54274"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:54283"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:42146"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:43052"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:42796"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:41066"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:41031"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:40262"}, {"tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2026:36797"}], "solutions": [{"lang": "en", "value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"}, {"lang": "en", "value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6.0"}, {"lang": "en", "value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"}, {"lang": "en", "value": "RHSA-2026:34364: Logging for Red Hat OpenShift 6.4"}, {"lang": "en", "value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"}, {"lang": "en", "value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"}, {"lang": "en", "value": "RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9"}, {"lang": "en", "value": "RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"}, {"lang": "en", "value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"}, {"lang": "en", "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"}, {"lang": "en", "value": "RHSA-2026:17713: Red Hat Hardened Images"}, {"lang": "en", "value": "RHSA-2026:17714: Red Hat Hardened Images"}, {"lang": "en", "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"}, {"lang": "en", "value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"}, {"lang": "en", "value": "RHSA-2026:41928: Red Hat Migration Toolkit for Containers 1.8"}, {"lang": "en", "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"}, {"lang": "en", "value": "RHSA-2026:33120: Red Hat OpenShift Service Mesh 3.0"}, {"lang": "en", "value": "RHSA-2026:33123: Red Hat OpenShift Service Mesh 3.1"}, {"lang": "en", "value": "RHSA-2026:33142: Red Hat OpenShift Service Mesh 3.2"}, {"lang": "en", "value": "RHSA-2026:33150: Red Hat OpenShift Service Mesh 3.3"}, {"lang": "en", "value": "RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"}, {"lang": "en", "value": "RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"}, {"lang": "en", "value": "RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"}, {"lang": "en", "value": "RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"}, {"lang": "en", "value": "RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"}, {"lang": "en", "value": "RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"}, {"lang": "en", "value": "RHSA-2026:42146: Red Hat Quay 3.12"}, {"lang": "en", "value": "RHSA-2026:43052: Red Hat Quay 3.12"}, {"lang": "en", "value": "RHSA-2026:42796: Red Hat Quay 3.15"}, {"lang": "en", "value": "RHSA-2026:41066: Red Hat Quay 3.16"}, {"lang": "en", "value": "RHSA-2026:41031: Red Hat Quay 3.1"}, {"lang": "en", "value": "RHSA-2026:40262: Red Hat Quay 3.9"}, {"lang": "en", "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"}], "timeline": [{"lang": "en", "time": "2026-05-07T20:00:51.685Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2026-05-07T19:41:18.615Z", "value": "Made public."}], "title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing", "workarounds": [{"lang": "en", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}], "x_adpType": "supplier", "x_generator": {"engine": "sadp-cli 1.0.0"}, "providerMetadata": {"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "shortName": "redhat-SADP", "dateUpdated": "2026-08-18T12:05:35.369Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing", "metrics": [{"other": {"type": "Red Hat severity rating", "content": {"value": "Important", "namespace": "https://access.redhat.com/security/updates/classification/"}}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"cpes": ["cpe:/a:redhat:cert_manager:1.19::el9"], "vendor": "Red Hat", "product": "Cert Manager support for Red Hat OpenShift release 1.19", "versions": [{"status": "unaffected", "version": "1786613805", "lessThan": "*", "versionType": "rpm"}], "packageName": "cert-manager/jetstack-cert-manager-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:logging:6.0::el9"], "vendor": "Red Hat", "product": "Logging Subsystem for Red Hat OpenShift 6.0", "versions": [{"status": "unaffected", "version": "1785419067", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-logging/logging-loki-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:logging:6.2::el9"], "vendor": "Red Hat", "product": "Logging Subsystem for Red Hat OpenShift 6.2", "versions": [{"status": "unaffected", "version": "1784748010", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-logging/logging-loki-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:logging:6.4::el9"], "vendor": "Red Hat", "product": "Logging Subsystem for Red Hat OpenShift 6.4", "versions": [{"status": "unaffected", "version": "1782405469", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-logging/logging-loki-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_api_data_protection:1.3::el9"], "vendor": "Red Hat", "product": "OpenShift API for Data Protection 1.3", "versions": [{"status": "unaffected", "version": "1785177357", "lessThan": "*", "versionType": "rpm"}], "packageName": "oadp/oadp-velero-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_api_data_protection:1.6::el9"], "vendor": "Red Hat", "product": "OpenShift API for Data Protection 1.6", "versions": [{"status": "unaffected", "version": "1784058822", "lessThan": "*", "versionType": "rpm"}], "packageName": "oadp/oadp-velero-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:advanced_cluster_security:4.10::el8"], "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10", "versions": [{"status": "unaffected", "version": "1783357140", "lessThan": "*", "versionType": "rpm"}], "packageName": "advanced-cluster-security/rhacs-main-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:advanced_cluster_security:4.9::el8"], "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Security for Kubernetes 4.9", "versions": [{"status": "unaffected", "version": "1783357116", "lessThan": "*", "versionType": "rpm"}], "packageName": "advanced-cluster-security/rhacs-main-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhdh:1.10::el9"], "vendor": "Red Hat", "product": "Red Hat Developer Hub 1.10", "versions": [{"status": "unaffected", "version": "1783447707", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhdh/rhdh-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhdh:1.9::el9"], "vendor": "Red Hat", "product": "Red Hat Developer Hub 1.9", "versions": [{"status": "unaffected", "version": "1782767215", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhdh/rhdh-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:hummingbird:1"], "vendor": "Red Hat", "product": "Red Hat Hardened Images", "versions": [{"status": "unaffected", "version": "1.25.10-2.2.hum1", "lessThan": "*", "versionType": "rpm"}], "packageName": "golang1-25-main", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:hummingbird:1"], "vendor": "Red Hat", "product": "Red Hat Hardened Images", "versions": [{"status": "unaffected", "version": "1.26.3-2.2.hum1", "lessThan": "*", "versionType": "rpm"}], "packageName": "golang1-26-main", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhmt:1.8::el8"], "vendor": "Red Hat", "product": "Red Hat Migration Toolkit 1.8", "versions": [{"status": "unaffected", "version": "1783953372", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhmtc/openshift-migration-controller-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:migration_toolkit_applications:8.1::el9"], "vendor": "Red Hat", "product": "Red Hat Migration Toolkit for Applications 8.1", "versions": [{"status": "unaffected", "version": "1785171639", "lessThan": "*", "versionType": "rpm"}], "packageName": "mta/mta-cli-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:migration_toolkit_applications:8.2::el9"], "vendor": "Red Hat", "product": "Red Hat Migration Toolkit for Applications 8.2", "versions": [{"status": "unaffected", "version": "1784211378", "lessThan": "*", "versionType": "rpm"}], "packageName": "mta/mta-cli-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI 2.25", "versions": [{"status": "unaffected", "version": "1783544461", "lessThan": "*", "versionType": "rpm"}], "packageName": "rhoai/odh-kueue-controller-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.0::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.0", "versions": [{"status": "unaffected", "version": "1782222217", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-cni-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.0::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.0", "versions": [{"status": "unaffected", "version": "1782223341", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-pilot-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.0::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.0", "versions": [{"status": "unaffected", "version": "1782296193", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-proxyv2-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.0::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.0", "versions": [{"status": "unaffected", "version": "1782222607", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.1::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.1", "versions": [{"status": "unaffected", "version": "1782222163", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-cni-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.1::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.1", "versions": [{"status": "unaffected", "version": "1782223138", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-pilot-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.1::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.1", "versions": [{"status": "unaffected", "version": "1782222394", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-proxyv2-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.1::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.1", "versions": [{"status": "unaffected", "version": "1782222451", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.2::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.2", "versions": [{"status": "unaffected", "version": "1782226178", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-cni-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.2::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.2", "versions": [{"status": "unaffected", "version": "1782224487", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-pilot-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.2::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.2", "versions": [{"status": "unaffected", "version": "1782303211", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-proxyv2-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.2::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.2", "versions": [{"status": "unaffected", "version": "1782224541", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.3::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.3", "versions": [{"status": "unaffected", "version": "1782223045", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-cni-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.3::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.3", "versions": [{"status": "unaffected", "version": "1782222366", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-pilot-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.3::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.3", "versions": [{"status": "unaffected", "version": "1782310747", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-proxyv2-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3.3::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Service Mesh 3.3", "versions": [{"status": "unaffected", "version": "1782222038", "lessThan": "*", "versionType": "rpm"}], "packageName": "openshift-service-mesh/istio-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:workload_availability_nhc:0.12::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Workload Availability 0.12", "versions": [{"status": "unaffected", "version": "1785202723", "lessThan": "*", "versionType": "rpm"}], "packageName": "workload-availability/node-healthcheck-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:workload_availability_snr:0.13::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Workload Availability 0.13", "versions": [{"status": "unaffected", "version": "1785203036", "lessThan": "*", "versionType": "rpm"}], "packageName": "workload-availability/self-node-remediation-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:workload_availability_sbr:0.3::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Workload Availability 0.3", "versions": [{"status": "unaffected", "version": "1785203474", "lessThan": "*", "versionType": "rpm"}], "packageName": "workload-availability/storage-based-remediation-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:workload_availability_mdr:0.7::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Workload Availability 0.7", "versions": [{"status": "unaffected", "version": "1785203508", "lessThan": "*", "versionType": "rpm"}], "packageName": "workload-availability/machine-deletion-remediation-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:workload_availability_far:0.8::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Workload Availability 0.8", "versions": [{"status": "unaffected", "version": "1785203079", "lessThan": "*", "versionType": "rpm"}], "packageName": "workload-availability/fence-agents-remediation-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:workload_availability_nmo:5.7::el9"], "vendor": "Red Hat", "product": "Red Hat OpenShift Workload Availability 5.7", "versions": [{"status": "unaffected", "version": "1785202847", "lessThan": "*", "versionType": "rpm"}], "packageName": "workload-availability/node-maintenance-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:quay:3.10::el8"], "vendor": "Red Hat", "product": "Red Hat Quay 3.1", "versions": [{"status": "unaffected", "version": "1783750447", "lessThan": "*", "versionType": "rpm"}], "packageName": "quay/quay-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:quay:3.12::el8"], "vendor": "Red Hat", "product": "Red Hat Quay 3.12", "versions": [{"status": "unaffected", "version": "1783751865", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "1784353904", "lessThan": "*", "versionType": "rpm"}], "packageName": "quay/quay-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:quay:3.15::el8"], "vendor": "Red Hat", "product": "Red Hat Quay 3.15", "versions": [{"status": "unaffected", "version": "1784351966", "lessThan": "*", "versionType": "rpm"}], "packageName": "quay/quay-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:quay:3.16::el9"], "vendor": "Red Hat", "product": "Red Hat Quay 3.16", "versions": [{"status": "unaffected", "version": "1783955846", "lessThan": "*", "versionType": "rpm"}], "packageName": "quay/quay-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:quay:3.9::el8"], "vendor": "Red Hat", "product": "Red Hat Quay 3.9", "versions": [{"status": "unaffected", "version": "1784125838", "lessThan": "*", "versionType": "rpm"}], "packageName": "quay/quay-rhel8", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:trusted_artifact_signer:1.4::el9"], "vendor": "Red Hat", "product": "Red Hat Trusted Artifact Signer 1.4", "versions": [{"status": "unaffected", "version": "4-1.4.2", "lessThan": "*", "versionType": "rpm"}, {"status": "unaffected", "version": "4-1.4.3", "lessThan": "*", "versionType": "rpm"}], "packageName": "conforma-cli-stack-v1", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:assisted_installer:2"], "vendor": "Red Hat", "product": "Assisted Installer for Red Hat OpenShift Container Platform 2", "packageName": "rhai/assisted-installer-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:confidential_compute_attestation:1"], "vendor": "Red Hat", "product": "Confidential Compute Attestation", "packageName": "build-of-trustee/trustee-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:confidential_compute_attestation:1"], "vendor": "Red Hat", "product": "Confidential Compute Attestation", "packageName": "confidential-compute-attestation-tech-preview/trustee-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:confidential_compute_attestation:1"], "vendor": "Red Hat", "product": "Confidential Compute Attestation", "packageName": "openshift-sandboxed-containers/osc-monitor-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:cryostat:4"], "vendor": "Red Hat", "product": "Cryostat 4", "packageName": "cryostat/cryostat-storage-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"], "vendor": "Red Hat", "product": "Custom Metric Autoscaler operator for Red Hat Openshift", "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:external_secrets_operator:1"], "vendor": "Red Hat", "product": "External Secrets Operator for Red Hat OpenShift", "packageName": "external-secrets-operator/external-secrets-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_file_integrity_operator:1"], "vendor": "Red Hat", "product": "File Integrity Operator", "packageName": "compliance/openshift-compliance-operator-bundle", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:gatekeeper:3"], "vendor": "Red Hat", "product": "Gatekeeper 3", "packageName": "gatekeeper/gatekeeper-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:lvms:4"], "vendor": "Red Hat", "product": "Logical Volume Manager Storage", "packageName": "lvms4/lvms-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:lvms:4"], "vendor": "Red Hat", "product": "Logical Volume Manager Storage", "packageName": "lvms4/topolvm-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:lvms:4"], "vendor": "Red Hat", "product": "Logical Volume Manager Storage", "packageName": "lvms4/topolvm-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:multiarch_tuning_operator"], "vendor": "Red Hat", "product": "Multiarch Tuning Operator", "packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:multicluster_engine"], "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "packageName": "multicluster-engine/addon-manager-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:multicluster_engine"], "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "packageName": "multicluster-engine/assisted-installer-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:multicluster_engine"], "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "packageName": "multicluster-engine/assisted-installer-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:multicluster_engine"], "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "packageName": "multicluster-engine/backplane-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:multicluster_engine"], "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:multicluster_engine"], "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "packageName": "multicluster-engine/discovery-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:multicluster_engine"], "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "packageName": "multicluster-engine/hypershift-addon-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:multicluster_engine"], "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "packageName": "multicluster-engine/maestro-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:multicluster_engine"], "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "packageName": "multicluster-engine/managedcluster-import-controller-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:multicluster_engine"], "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "packageName": "multicluster-engine/multicloud-manager-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:multicluster_engine"], "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "packageName": "multicluster-engine/placement-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:multicluster_engine"], "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "packageName": "multicluster-engine/registration-operator-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:multicluster_engine"], "vendor": "Red Hat", "product": "Multicluster Engine for Kubernetes", "packageName": "multicluster-engine/work-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:multicluster_globalhub"], "vendor": "Red Hat", "product": "Multicluster Global Hub", "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:multicluster_globalhub"], "vendor": "Red Hat", "product": "Multicluster Global Hub", "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:network_observ_optr:1"], "vendor": "Red Hat", "product": "Network Observability Operator", "packageName": "network-observability/network-observability-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:ocp_tools"], "vendor": "Red Hat", "product": "OpenShift Developer Tools and Services", "packageName": "helm", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_lightspeed"], "vendor": "Red Hat", "product": "OpenShift Lightspeed", "packageName": "openshift-lightspeed/lightspeed-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_pipelines:1"], "vendor": "Red Hat", "product": "OpenShift Pipelines", "packageName": "openshift-pipelines-client", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:serverless:1"], "vendor": "Red Hat", "product": "OpenShift Serverless", "packageName": "kn-workflow-plugin", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:2"], "vendor": "Red Hat", "product": "OpenShift Service Mesh 2", "packageName": "openshift-golang-builder-container", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:service_mesh:2"], "vendor": "Red Hat", "product": "OpenShift Service Mesh 2", "packageName": "openshift-service-mesh/pilot-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_mesh:3"], "vendor": "Red Hat", "product": "OpenShift Service Mesh 3", "packageName": "openshift-golang-builder-container", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_power_monitoring"], "vendor": "Red Hat", "product": "Power monitoring for Red Hat OpenShift", "packageName": "openshift-power-monitoring/power-monitoring-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:acm:2"], "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:acm:2"], "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:acm:2"], "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "packageName": "rhacm2/config-policy-controller-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:acm:2"], "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "packageName": "rhacm2/governance-policy-propagator-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:acm:2"], "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "packageName": "rhacm2/klusterlet-addon-controller-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:acm:2"], "vendor": "Red Hat", "product": "Red Hat Advanced Cluster Management for Kubernetes 2", "packageName": "rhacm2/thanos-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2", "packageName": "ansible-automation-platform/platform-operator-bundle", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2", "packageName": "automation-gateway-proxy", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2", "packageName": "automation-gateway-proxy-openssl30", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:ansible_automation_platform:2"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2", "packageName": "automation-gateway-proxy-openssl32", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:ceph_storage:5"], "vendor": "Red Hat", "product": "Red Hat Ceph Storage 5", "packageName": "rhceph/rhceph-5-dashboard-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:ceph_storage:6"], "vendor": "Red Hat", "product": "Red Hat Ceph Storage 6", "packageName": "rhceph/rhceph-6-dashboard-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:ceph_storage:9"], "vendor": "Red Hat", "product": "Red Hat Ceph Storage 9", "packageName": "rhceph/alloy-rhel10", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:certifications:9"], "vendor": "Red Hat", "product": "Red Hat Certification Program for Red Hat Enterprise Linux 9", "packageName": "redhat-certification-preflight", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:edge_manager:1"], "vendor": "Red Hat", "product": "Red Hat Edge Manager 1", "packageName": "flightctl", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:edge_manager:1"], "vendor": "Red Hat", "product": "Red Hat Edge Manager 1", "packageName": "rhem/flightctl-api-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "buildah", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "golang", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "grafana", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "gvisor-tap-vsock", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "ignition", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "image-builder", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "opentelemetry-collector", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "osbuild-composer", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "podman", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "rhel10/bootc-image-builder", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "rhel10-eus/rhel-10.0-bootc-image-builder", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "skopeo", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "container-tools:rhel8/buildah", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "container-tools:rhel8/conmon", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "container-tools:rhel8/podman", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "container-tools:rhel8/skopeo", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "go-toolset:rhel8/golang", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "grafana", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "osbuild-composer", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "buildah", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "conmon", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "golang", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "grafana", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "gvisor-tap-vsock", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "ignition", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "image-builder", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "opentelemetry-collector", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "osbuild-composer", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "podman", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "rhel9/bootc-image-builder", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "rhel9-eus/rhel-9.6-bootc-image-builder", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "skopeo", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:enterprise_linux_ai:3"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux AI (RHEL AI) 3", "packageName": "golang", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:lightspeed_for_runtimes:1"], "vendor": "Red Hat", "product": "Red Hat Lightspeed for Runtimes Operator", "packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-kube-auth-proxy-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-kueue-controller-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-maas-api-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-mlflow-operator-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-ml-pipelines-driver-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-ml-pipelines-launcher-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-mod-arch-gen-ai-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-model-controller-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-modelmesh-serving-controller-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-model-registry-operator-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-model-registry-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-model-serving-api-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_ai"], "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_cluster_manager_cli:1"], "vendor": "Red Hat", "product": "Red Hat OpenShift Cluster Manager CLI", "packageName": "ocm-cli-clients/ocm-cli-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "conmon", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "cri-o", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "ignition", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "kata-containers", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "microshift", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift4/ose-cli-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift4/ose-hypershift-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift4/ose-installer", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift4/ose-node", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift4/ose-sdn-rhel7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift4/ose-sdn-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift4/ose-sdn-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift-clients", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "openshift-golang-builder-container", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "ose-aws-ecr-image-credential-provider", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "ose-azure-acr-image-credential-provider", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "ose-gcp-gcr-image-credential-provider", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "podman", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "packageName": "skopeo", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4", "packageName": "ocs4/cephcsi-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4", "packageName": "odf4/cephcsi-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4", "packageName": "odf4/cephcsi-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4", "packageName": "odf4/odf-cli-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_data_foundation:4"], "vendor": "Red Hat", "product": "Red Hat Openshift Data Foundation 4", "packageName": "odf4/odf-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_devspaces:3"], "vendor": "Red Hat", "product": "Red Hat OpenShift Dev Spaces", "packageName": "devspaces/configbump-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_devspaces:3"], "vendor": "Red Hat", "product": "Red Hat OpenShift Dev Spaces", "packageName": "devspaces/traefik-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:devworkspace"], "vendor": "Red Hat", "product": "Red Hat OpenShift Dev Workspaces Operator", "packageName": "devworkspace/devworkspace-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_distributed_tracing:3"], "vendor": "Red Hat", "product": "Red Hat OpenShift distributed tracing 3", "packageName": "rhosdt/tempo-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:windows_machine_config"], "vendor": "Red Hat", "product": "Red Hat OpenShift for Windows Containers", "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openshift_gitops:1"], "vendor": "Red Hat", "product": "Red Hat OpenShift GitOps", "packageName": "openshift-gitops-1/argocd-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openshift_gitops:1"], "vendor": "Red Hat", "product": "Red Hat OpenShift GitOps", "packageName": "openshift-gitops-1/argocd-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:container_native_virtualization:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Virtualization 4", "packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:container_native_virtualization:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Virtualization 4", "packageName": "container-native-virtualization/virt-api-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:container_native_virtualization:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Virtualization 4", "packageName": "kubevirt", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:container_native_virtualization:4"], "vendor": "Red Hat", "product": "Red Hat OpenShift Virtualization 4", "packageName": "openshift-golang-builder-container", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:openstack:16.2"], "vendor": "Red Hat", "product": "Red Hat OpenStack Platform 16.2", "packageName": "rhosp-rhel8/osp-director-operator-bundle", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openstack:17.1"], "vendor": "Red Hat", "product": "Red Hat OpenStack Platform 17.1", "packageName": "rhosp-rhel9/osp-director-operator-bundle", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:openstack:18.0"], "vendor": "Red Hat", "product": "Red Hat OpenStack Platform 18.0", "packageName": "rhoso-operators/ovn-rhel9-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:quay:3"], "vendor": "Red Hat", "product": "Red Hat Quay 3", "packageName": "quay/quay-builder-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:satellite:6"], "vendor": "Red Hat", "product": "Red Hat Satellite 6", "packageName": "satellite/iop-vmaas-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:service_interconnect:1"], "vendor": "Red Hat", "product": "Red Hat Service Interconnect 1", "packageName": "skupper-cli", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:service_interconnect:2"], "vendor": "Red Hat", "product": "Red Hat Service Interconnect 2", "packageName": "skupper-cli", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:trusted_artifact_signer:1"], "vendor": "Red Hat", "product": "Red Hat Trusted Artifact Signer", "packageName": "rhtas/ec-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:openshift_security_profiles_operator:1"], "vendor": "Red Hat", "product": "Security Profiles Operator", "packageName": "compliance/openshift-security-profiles-rhel8-operator", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:zero_trust_workload_identity_manager:1"], "vendor": "Red Hat", "product": "Zero Trust Workload Identity Manager", "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:zero_trust_workload_identity_manager:0"], "vendor": "Red Hat", "product": "Zero Trust Workload Identity Manager - Tech Preview", "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}], "timeline": [{"lang": "en", "time": "2026-05-07T20:00:51.685Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2026-05-07T19:41:18.615Z", "value": "Made public."}], "solutions": [{"lang": "en", "value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"}, {"lang": "en", "value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6.0"}, {"lang": "en", "value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"}, {"lang": "en", "value": "RHSA-2026:34364: Logging for Red Hat OpenShift 6.4"}, {"lang": "en", "value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"}, {"lang": "en", "value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"}, {"lang": "en", "value": "RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"}, {"lang": "en", "value": "RHSA-2026:36319: Red Hat Advanced Cluster Security for Kubernetes 4.9"}, {"lang": "en", "value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"}, {"lang": "en", "value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"}, {"lang": "en", "value": "RHSA-2026:17713: Red Hat Hardened Images"}, {"lang": "en", "value": "RHSA-2026:17714: Red Hat Hardened Images"}, {"lang": "en", "value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"}, {"lang": "en", "value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"}, {"lang": "en", "value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"}, {"lang": "en", "value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"}, {"lang": "en", "value": "RHSA-2026:33120: Red Hat OpenShift Service Mesh 3.0"}, {"lang": "en", "value": "RHSA-2026:33123: Red Hat OpenShift Service Mesh 3.1"}, {"lang": "en", "value": "RHSA-2026:33142: Red Hat OpenShift Service Mesh 3.2"}, {"lang": "en", "value": "RHSA-2026:33150: Red Hat OpenShift Service Mesh 3.3"}, {"lang": "en", "value": "RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"}, {"lang": "en", "value": "RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"}, {"lang": "en", "value": "RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"}, {"lang": "en", "value": "RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"}, {"lang": "en", "value": "RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"}, {"lang": "en", "value": "RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"}, {"lang": "en", "value": "RHSA-2026:42146: Red Hat Quay 3.12"}, {"lang": "en", "value": "RHSA-2026:43052: Red Hat Quay 3.12"}, {"lang": "en", "value": "RHSA-2026:42796: Red Hat Quay 3.15"}, {"lang": "en", "value": "RHSA-2026:41066: Red Hat Quay 3.16"}, {"lang": "en", "value": "RHSA-2026:41031: Red Hat Quay 3.1"}, {"lang": "en", "value": "RHSA-2026:40262: Red Hat Quay 3.9"}, {"lang": "en", "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"}], "x_adpType": "supplier", "datePublic": "2026-05-07T19:41:18.615Z", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-42499", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809", "name": "RHBZ#2467809", "tags": ["issue-tracking", "x_refsource_REDHAT"]}, {"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json", "tags": ["x_sadp-csaf-vex"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:54531", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:50843", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:47952", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:34364", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:51033", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:43692", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:36625", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:36319", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:36754", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:33574", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:17713", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:17714", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:41928", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:50300", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:43038", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:42644", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:33120", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:33123", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:33142", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:33150", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:54287", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:54284", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:54286", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:54285", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:54274", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:54283", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:42146", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:43052", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:42796", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:41066", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:41031", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:40262", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:36797", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}], "workarounds": [{"lang": "en", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}], "x_generator": {"engine": "sadp-cli 1.0.0"}, "descriptions": [{"lang": "en", "value": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1046", "description": "Creation of Immutable Text Using String Concatenation"}]}], "providerMetadata": {"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "shortName": "redhat-SADP", "dateUpdated": "2026-08-17T12:04:59.746Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-42499", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-08T16:55:28.873015Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-08T16:55:43.428Z"}}], "cna": {"title": "Quadratic string concatenation in consumePhrase in net/mail", "affected": [{"vendor": "Go standard library", "product": "net/mail", "versions": [{"status": "affected", "version": "0", "lessThan": "1.25.10", "versionType": "semver"}, {"status": "affected", "version": "1.26.0-0", "lessThan": "1.26.3", "versionType": "semver"}], "packageName": "net/mail", "collectionURL": "https://pkg.go.dev", "defaultStatus": "unaffected", "programRoutines": [{"name": "addrParser.consumePhrase"}, {"name": "AddressParser.Parse"}, {"name": "AddressParser.ParseList"}, {"name": "Header.AddressList"}, {"name": "ParseAddress"}, {"name": "ParseAddressList"}]}], "references": [{"url": "https://go.dev/issue/78987"}, {"url": "https://go.dev/cl/771520"}, {"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"}, {"url": "https://pkg.go.dev/vuln/GO-2026-4977"}], "descriptions": [{"lang": "en", "value": "Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-407: Inefficient Algorithmic Complexity"}]}], "providerMetadata": {"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", "dateUpdated": "2026-05-07T19:41:18.615Z"}}}, "cveMetadata": {"cveId": "CVE-2026-42499", "state": "PUBLISHED", "dateUpdated": "2026-08-17T12:04:59.746Z", "dateReserved": "2026-04-28T00:21:12.791Z", "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "datePublished": "2026-05-07T19:41:18.615Z", "assignerShortName": "Go"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://pkg.go.dev", "defaultStatus": "unaffected", "packageName": "net/mail", "product": "net/mail", "programRoutines": [{"name": "addrParser.consumePhrase"}, {"name": "AddressParser.Parse"}, {"name": "AddressParser.ParseList"}, {"name": "Header.AddressList"}, {"name": "ParseAddress"}, {"name": "ParseAddressList"}], "vendor": "Go standard library", "versions": [{"lessThan": "1.25.10", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThan": "1.26.3", "status": "affected", "version": "1.26.0-0", "versionType": "semver"}]}], "source": "security@golang.org"}, {"affectedData": [{"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:assisted_installer:2"], "defaultStatus": "affected", "packageName": "rhai/assisted-installer-rhel9", "product": "Assisted Installer for Red Hat OpenShift Container Platform 2", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:confidential_compute_attestation:1"], "defaultStatus": "affected", "packageName": "build-of-trustee/trustee-rhel9-operator", "product": "Confidential Compute Attestation", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:cryostat:4"], "defaultStatus": "affected", "packageName": "cryostat/cryostat-storage-rhel9", "product": "Cryostat 4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:external_secrets_operator:1"], "defaultStatus": "affected", "packageName": "external-secrets-operator/external-secrets-rhel9", "product": "External Secrets Operator for Red Hat OpenShift", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_file_integrity_operator:1"], "defaultStatus": "affected", "packageName": "compliance/openshift-compliance-operator-bundle", "product": "File Integrity Operator", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:lvms:4"], "defaultStatus": "affected", "packageName": "lvms4/lvms-rhel9-operator", "product": "Logical Volume Manager Storage", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:multiarch_tuning_operator"], "defaultStatus": "affected", "packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator", "product": "Multiarch Tuning Operator", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_lightspeed"], "defaultStatus": "affected", "packageName": "openshift-lightspeed/lightspeed-rhel9-operator", "product": "OpenShift Lightspeed", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:2"], "defaultStatus": "affected", "packageName": "openshift-service-mesh/pilot-rhel8", "product": "OpenShift Service Mesh 2", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3"], "defaultStatus": "affected", "packageName": "openshift-golang-builder-container", "product": "OpenShift Service Mesh 3", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_power_monitoring"], "defaultStatus": "affected", "packageName": "openshift-power-monitoring/power-monitoring-rhel9-operator", "product": "Power monitoring for Red Hat OpenShift", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:ceph_storage:5"], "defaultStatus": "affected", "packageName": "rhceph/rhceph-5-dashboard-rhel8", "product": "Red Hat Ceph Storage 5", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:ceph_storage:6"], "defaultStatus": "affected", "packageName": "rhceph/rhceph-6-dashboard-rhel9", "product": "Red Hat Ceph Storage 6", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:ceph_storage:9"], "defaultStatus": "affected", "packageName": "rhceph/alloy-rhel10", "product": "Red Hat Ceph Storage 9", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/o:redhat:enterprise_linux:10"], "defaultStatus": "affected", "packageName": "go-toolset", "product": "Red Hat Enterprise Linux 10", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "affected", "packageName": "go-toolset (go-toolset:rhel8)", "product": "Red Hat Enterprise Linux 8", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "affected", "packageName": "conmon", "product": "Red Hat Enterprise Linux 9", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai"], "defaultStatus": "affected", "packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_cluster_manager_cli:1"], "defaultStatus": "affected", "packageName": "ocm-cli-clients/ocm-cli-rhel9", "product": "Red Hat OpenShift Cluster Manager CLI", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4"], "defaultStatus": "affected", "packageName": "cri-o", "product": "Red Hat OpenShift Container Platform 4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4"], "defaultStatus": "affected", "packageName": "odf4/odf-cli-rhel9", "product": "Red Hat Openshift Data Foundation 4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_devspaces:3"], "defaultStatus": "affected", "packageName": "devspaces/configbump-rhel9", "product": "Red Hat OpenShift Dev Spaces", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:devworkspace"], "defaultStatus": "affected", "packageName": "devworkspace/devworkspace-rhel9-operator", "product": "Red Hat OpenShift Dev Workspaces Operator", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_distributed_tracing:3"], "defaultStatus": "affected", "packageName": "rhosdt/tempo-rhel9", "product": "Red Hat OpenShift distributed tracing 3", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_gitops:1"], "defaultStatus": "affected", "packageName": "openshift-gitops-1/argocd-rhel8", "product": "Red Hat OpenShift GitOps", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:container_native_virtualization:4"], "defaultStatus": "affected", "packageName": "openshift-golang-builder-container", "product": "Red Hat OpenShift Virtualization 4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3"], "defaultStatus": "affected", "packageName": "quay/quay-builder-rhel8", "product": "Red Hat Quay 3", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:trusted_artifact_signer:1"], "defaultStatus": "affected", "packageName": "rhtas/ec-rhel9", "product": "Red Hat Trusted Artifact Signer", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_security_profiles_operator:1"], "defaultStatus": "affected", "packageName": "compliance/openshift-security-profiles-rhel8-operator", "product": "Security Profiles Operator", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:zero_trust_workload_identity_manager:1"], "defaultStatus": "affected", "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9", "product": "Zero Trust Workload Identity Manager", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:zero_trust_workload_identity_manager:0"], "defaultStatus": "affected", "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9", "product": "Zero Trust Workload Identity Manager - Tech Preview", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:cert_manager:1.19::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64", "product": "Cert Manager support for Red Hat OpenShift release 1.19", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:logging:6.0::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c3dbf8252b7abd2ddb5ce367bef6de204d6eadd3590d56f1931453ff727aa1ff_amd64", "product": "Logging for Red Hat OpenShift 6.0", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:logging:6.2::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:47ca97af3513344cfd4889396e3843357323d33fddb98cce46f8e5d5a0b1a5d0_amd64", "product": "Logging for Red Hat OpenShift 6.2", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:logging:6.4::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:e5b7cc503692837c64463dec9b5f26d4041604af41687089e3d2fa7049d18763_amd64", "product": "Logging for Red Hat OpenShift 6.4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_api_data_protection:1.3::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64", "product": "OpenShift API for Data Protection 1.3", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_api_data_protection:1.6::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:5f21bd5387a16c9d3b72317884972fd83cd091954f79c4f19df7e2b8c3758e16_ppc64le", "product": "OpenShift API for Data Protection 1.6", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:advanced_cluster_security:4.9::el8"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:42ce9a730012343eec85c5b69eb163311580df4682de47ca435043dff92c2dda_amd64", "product": "Red Hat Advanced Cluster Security 4.9", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:advanced_cluster_security:4.10::el8"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:05dd53e6127b9002119c9b45837f57a741aaee7675274f97bd23c85303b24c95_amd64", "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhdh:1.10::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:61883f5228095e3a3fd5b7daf60e29a5ffd053844f8661a2b5282a77c086dc02_amd64", "product": "Red Hat Developer Hub 1.10", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhdh:1.9::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64", "product": "Red Hat Developer Hub 1.9", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:migration_toolkit_applications:8.1::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:e8a9614c7189c8ae2951ef3bd4b3a5dc548917333d5ccadf81bf9cf1bd182e85_amd64", "product": "Red Hat Migration Toolkit for Applications 8.1", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:migration_toolkit_applications:8.2::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/mta/mta-analyzer-addon-rhel9@sha256:1e20ac649ee7fdcdad9930b1f0384e10c8794db9a2f211d4e3d1679c0c10cc53_amd64", "product": "Red Hat Migration Toolkit for Applications 8.2", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhmt:1.8::el8"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64", "product": "Red Hat Migration Toolkit for Containers 1.8", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai:2.25::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:0ba264bf70f053344047e3b1a535bf5b5547d57ef71dd6a7c7dc12b689840ba1_arm64", "product": "Red Hat OpenShift AI 2.25", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.0::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9@sha256:5fdcc9c7b6ff9b4b099713c4d549128c12b335fb0c28154f631ba3e9f99c8f52_amd64", "product": "Red Hat OpenShift Service Mesh 3.0", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.1::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/openshift-service-mesh-tech-preview/istio-ztunnel-rhel9@sha256:2213bdf2e395c942887e916b0604dd177f3c7b25919a8fa6c4ea2246b33087ca_ppc64le", "product": "Red Hat OpenShift Service Mesh 3.1", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.2::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:6361c72a416f9c526cb8bd5302a09576ecb42783b5463373b4e1a156a853e7c7_amd64", "product": "Red Hat OpenShift Service Mesh 3.2", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:3.3::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:33b95627674ae3c2c861b608ed1774eebf0fb935ac68252607a47f85d08b2e9e_s390x", "product": "Red Hat OpenShift Service Mesh 3.3", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:workload_availability_nhc:0.12::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64", "product": "Red Hat OpenShift Workload Availability 0.12", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:workload_availability_snr:0.13::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64", "product": "Red Hat OpenShift Workload Availability 0.13", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:workload_availability_sbr:0.3::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x", "product": "Red Hat OpenShift Workload Availability 0.3", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:workload_availability_mdr:0.7::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64", "product": "Red Hat OpenShift Workload Availability 0.7", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:workload_availability_far:0.8::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64", "product": "Red Hat OpenShift Workload Availability 0.8", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:workload_availability_nmo:5.7::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64", "product": "Red Hat OpenShift Workload Availability 5.7", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.12::el8"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64", "product": "Red Hat Quay 3.12", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.15::el8"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x", "product": "Red Hat Quay 3.15", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.16::el9"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le", "product": "Red Hat Quay 3.16", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.10::el8"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/quay/clair-rhel8@sha256:2b0948a125eb22fdbcebdd668049aaac225079a75583ddf06e4e49182f377a83_amd64", "product": "Red Hat Quay 3.1", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:quay:3.9::el8"], "defaultStatus": "unaffected", "packageName": "registry.redhat.io/quay/clair-rhel8@sha256:381f3af2c038cb3a0d14191c1a541cc7e9752698ed3980dcd33ee91ef3752517_s390x", "product": "Red Hat Quay 3.9", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:trusted_artifact_signer:1.4::el9"], "defaultStatus": "unaffected", "packageName": "conforma-cli-stack-v1-4@amd64", "product": "Red Hat Trusted Artifact Signer 1.4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"], "defaultStatus": "unaffected", "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9", "product": "Custom Metric Autoscaler operator for Red Hat Openshift", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:lvms:4"], "defaultStatus": "unaffected", "packageName": "lvms4/topolvm-rhel8", "product": "Logical Volume Manager Storage", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:network_observ_optr:1"], "defaultStatus": "unaffected", "packageName": "network-observability/network-observability-rhel9-operator", "product": "Network Observability Operator", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:service_mesh:2"], "defaultStatus": "unaffected", "packageName": "openshift-golang-builder-container", "product": "OpenShift Service Mesh 2", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_ai"], "defaultStatus": "unaffected", "packageName": "rhoai/odh-kueue-controller-rhel8", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift:4"], "defaultStatus": "unaffected", "packageName": "conmon", "product": "Red Hat OpenShift Container Platform 4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openshift_data_foundation:4"], "defaultStatus": "unaffected", "packageName": "ocs4/cephcsi-rhel8", "product": "Red Hat Openshift Data Foundation 4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:windows_machine_config"], "defaultStatus": "unaffected", "packageName": "openshift4-wincw/windows-machine-config-rhel9-operator", "product": "Red Hat OpenShift for Windows Containers", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:container_native_virtualization:4"], "defaultStatus": "unaffected", "packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9", "product": "Red Hat OpenShift Virtualization 4", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openstack:16.2"], "defaultStatus": "unaffected", "packageName": "rhosp-rhel8/osp-director-operator-bundle", "product": "Red Hat OpenStack Platform 16.2", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openstack:17.1"], "defaultStatus": "unaffected", "packageName": "rhosp-rhel9/osp-director-operator-bundle", "product": "Red Hat OpenStack Platform 17.1", "vendor": "Red Hat"}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:openstack:18.0"], "defaultStatus": "unaffected", "packageName": "rhoso-operators/ovn-rhel9-operator", "product": "Red Hat OpenStack Platform 18.0", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:hummingbird:1"], "defaultStatus": "unaffected", "packageName": "golang1-25-main@aarch64", "product": "Red Hat Hardened Images", "vendor": "Red Hat"}], "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*", "matchCriteriaId": "1C966EF3-C51C-4239-B5FC-C44A5202FEC8", "versionEndExcluding": "1.25.10", "vulnerable": true}, {"criteria": "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*", "matchCriteriaId": "522E4CD0-2B99-4363-9C78-0BAFD988A2D6", "versionEndExcluding": "1.26.3", "versionStartIncluding": "1.26.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322."}], "id": "CVE-2026-42499", "lastModified": "2026-08-18T12:19:12.083", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-42499", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-08T16:55:28.873015Z", "version": "2.0.3"}}]}, "published": "2026-05-07T20:16:44.540", "references": [{"source": "security@golang.org", "tags": ["Patch"], "url": "https://go.dev/cl/771520"}, {"source": "security@golang.org", "tags": ["Issue Tracking"], "url": "https://go.dev/issue/78987"}, {"source": "security@golang.org", "tags": ["Release Notes"], "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"}, {"source": "security@golang.org", "tags": ["Vendor Advisory"], "url": "https://pkg.go.dev/vuln/GO-2026-4977"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:17713"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:17714"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:33120"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:33123"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:33142"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:33150"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:33574"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:34364"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:36319"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:36625"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:36754"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:36797"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:40262"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:41031"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:41066"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:41928"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:42146"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:42644"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:42796"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:43038"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:43052"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:43692"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:47952"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:50300"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:50843"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:51033"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:54274"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:54283"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:54284"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:54285"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:54286"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:54287"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/errata/RHSA-2026:54531"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://access.redhat.com/security/cve/CVE-2026-42499"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json"}], "sourceIdentifier": "security@golang.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-1046"}], "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "type": "Secondary"}]}

{}