{
  "threat_severity" : "Important",
  "public_date" : "2026-03-31T19:25:55Z",
  "bugzilla" : {
    "description" : "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
    "id" : "2453496",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
  },
  "cvss3" : {
    "cvss3_base_score" : "8.1",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-94",
  "details" : [ "Impact:\nThe fix for CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm) added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink.\nWhen an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time.\nAdditionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().\nPatches:\nUsers should upgrade to version 4.18.0.\nWorkarounds:\nDo not pass untrusted input as key names in options.imports. Only use developer-controlled, static key names.", "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function()." ],
  "statement" : "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user's browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
  "affected_release" : [ {
    "product_name" : "Cryostat 4 on RHEL 9",
    "release_date" : "2026-05-26T00:00:00Z",
    "advisory" : "RHSA-2026:17789",
    "cpe" : "cpe:/a:redhat:cryostat:4::el9",
    "package" : "cryostat/cryostat-openshift-console-plugin-rhel9:4.2.0-9"
  }, {
    "product_name" : "Cryostat 4 on RHEL 9",
    "release_date" : "2026-05-26T00:00:00Z",
    "advisory" : "RHSA-2026:17789",
    "cpe" : "cpe:/a:redhat:cryostat:4::el9",
    "package" : "cryostat/cryostat-rhel9:4.2.0-9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-04-27T00:00:00Z",
    "advisory" : "RHSA-2026:10713",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.1",
    "package" : "pcs-0:0.12.1-1.el10_1.3"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2026-05-19T00:00:00Z",
    "advisory" : "RHSA-2026:19008",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.2",
    "package" : "pcs-0:0.12.2-3.el10_2.1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "release_date" : "2026-04-29T00:00:00Z",
    "advisory" : "RHSA-2026:11470",
    "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0",
    "package" : "pcs-0:0.12.0-3.el10_0.5"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "release_date" : "2026-04-29T00:00:00Z",
    "advisory" : "RHSA-2026:11493",
    "cpe" : "cpe:/a:redhat:rhel_aus:8.4::highavailability",
    "package" : "pcs-0:0.10.8-1.el8_4.11"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
    "release_date" : "2026-04-29T00:00:00Z",
    "advisory" : "RHSA-2026:11493",
    "cpe" : "cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability",
    "package" : "pcs-0:0.10.8-1.el8_4.11"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
    "release_date" : "2026-04-29T00:00:00Z",
    "advisory" : "RHSA-2026:11494",
    "cpe" : "cpe:/a:redhat:rhel_tus:8.6::highavailability",
    "package" : "pcs-0:0.10.12-6.el8_6.13"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
    "release_date" : "2026-04-29T00:00:00Z",
    "advisory" : "RHSA-2026:11494",
    "cpe" : "cpe:/a:redhat:rhel_e4s:8.6::highavailability",
    "package" : "pcs-0:0.10.12-6.el8_6.13"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "release_date" : "2026-04-29T00:00:00Z",
    "advisory" : "RHSA-2026:11495",
    "cpe" : "cpe:/a:redhat:rhel_tus:8.8::highavailability",
    "package" : "pcs-0:0.10.15-4.el8_8.11"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "release_date" : "2026-04-29T00:00:00Z",
    "advisory" : "RHSA-2026:11495",
    "cpe" : "cpe:/a:redhat:rhel_e4s:8.8::highavailability",
    "package" : "pcs-0:0.10.15-4.el8_8.11"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-04-27T00:00:00Z",
    "advisory" : "RHSA-2026:10710",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9::highavailability",
    "package" : "pcs-0:0.11.10-1.el9_7.3"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2026-05-19T00:00:00Z",
    "advisory" : "RHSA-2026:19167",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9::highavailability",
    "package" : "pcs-0:0.11.11-2.el9_8.1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
    "release_date" : "2026-04-29T00:00:00Z",
    "advisory" : "RHSA-2026:11454",
    "cpe" : "cpe:/a:redhat:rhel_e4s:9.0::highavailability",
    "package" : "pcs-0:0.11.1-10.el9_0.11"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
    "release_date" : "2026-04-29T00:00:00Z",
    "advisory" : "RHSA-2026:11469",
    "cpe" : "cpe:/a:redhat:rhel_e4s:9.2::highavailability",
    "package" : "pcs-0:0.11.4-7.el9_2.8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.4 Extended Update Support",
    "release_date" : "2026-04-29T00:00:00Z",
    "advisory" : "RHSA-2026:11516",
    "cpe" : "cpe:/a:redhat:rhel_eus:9.4::highavailability",
    "package" : "pcs-0:0.11.7-2.el9_4.7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "release_date" : "2026-04-29T00:00:00Z",
    "advisory" : "RHSA-2026:11471",
    "cpe" : "cpe:/a:redhat:rhel_eus:9.6::highavailability",
    "package" : "pcs-0:0.11.9-2.el9_6.4"
  }, {
    "product_name" : "Streams for Apache Kafka 3.2.0",
    "release_date" : "2026-05-04T00:00:00Z",
    "advisory" : "RHSA-2026:13571",
    "cpe" : "cpe:/a:redhat:amq_streams:3.2::el9",
    "package" : "lodash"
  }, {
    "product_name" : "Migration Toolkit for Virtualization 2.1",
    "release_date" : "2026-05-19T00:00:00Z",
    "advisory" : "RHSA-2026:19409",
    "cpe" : "cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9",
    "package" : "migration-toolkit-virtualization/mtv-console-plugin-rhel9:1779139872"
  }, {
    "product_name" : "Migration Toolkit for Virtualization 2.9",
    "release_date" : "2026-05-19T00:00:00Z",
    "advisory" : "RHSA-2026:19410",
    "cpe" : "cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9",
    "package" : "migration-toolkit-virtualization/mtv-console-plugin-rhel9:1778927462"
  }, {
    "product_name" : "Network Observability (NETOBSERV) 1.11.2",
    "release_date" : "2026-05-13T00:00:00Z",
    "advisory" : "RHSA-2026:16874",
    "cpe" : "cpe:/a:redhat:network_observ_optr:1.11::el9",
    "package" : "network-observability/network-observability-console-plugin-compat-rhel9:1778508956"
  }, {
    "product_name" : "Network Observability (NETOBSERV) 1.11.2",
    "release_date" : "2026-05-13T00:00:00Z",
    "advisory" : "RHSA-2026:16874",
    "cpe" : "cpe:/a:redhat:network_observ_optr:1.11::el9",
    "package" : "network-observability/network-observability-console-plugin-rhel9:1778510461"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.5",
    "release_date" : "2026-05-04T00:00:00Z",
    "advisory" : "RHSA-2026:13553",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
    "package" : "ansible-automation-platform-25/lightspeed-rhel8:1777403872"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2.6",
    "release_date" : "2026-05-04T00:00:00Z",
    "advisory" : "RHSA-2026:13545",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2.6::el9",
    "package" : "ansible-automation-platform-26/lightspeed-rhel9:1777387242"
  }, {
    "product_name" : "Red Hat Developer Hub 1.8",
    "release_date" : "2026-04-22T00:00:00Z",
    "advisory" : "RHSA-2026:9742",
    "cpe" : "cpe:/a:redhat:rhdh:1.8::el9",
    "package" : "rhdh/rhdh-hub-rhel9:1776784286"
  }, {
    "product_name" : "Red Hat Developer Hub 1.9",
    "release_date" : "2026-05-05T00:00:00Z",
    "advisory" : "RHSA-2026:13826",
    "cpe" : "cpe:/a:redhat:rhdh:1.9::el9",
    "package" : "rhdh/rhdh-hub-rhel9:1777903262"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-05-20T00:00:00Z",
    "advisory" : "RHSA-2026:19712",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-dashboard-rhel9:1779189627"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-05-20T00:00:00Z",
    "advisory" : "RHSA-2026:19712",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-mod-arch-gen-ai-rhel9:1778473763"
  }, {
    "product_name" : "Red Hat OpenShift AI 3.3",
    "release_date" : "2026-05-20T00:00:00Z",
    "advisory" : "RHSA-2026:19712",
    "cpe" : "cpe:/a:redhat:openshift_ai:3.3::el9",
    "package" : "rhoai/odh-mod-arch-model-registry-rhel9:1778666987"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.17",
    "release_date" : "2026-05-20T00:00:00Z",
    "advisory" : "RHSA-2026:17598",
    "cpe" : "cpe:/a:redhat:openshift:4.17::el9",
    "package" : "openshift4/ose-networking-console-plugin-rhel9:1778517109"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.18",
    "release_date" : "2026-05-20T00:00:00Z",
    "advisory" : "RHSA-2026:17448",
    "cpe" : "cpe:/a:redhat:openshift:4.18::el9",
    "package" : "openshift4/ose-networking-console-plugin-rhel9:1778256287"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.2",
    "release_date" : "2026-05-20T00:00:00Z",
    "advisory" : "RHSA-2026:17468",
    "cpe" : "cpe:/a:redhat:openshift:4.20::el9",
    "package" : "openshift4/ose-networking-console-plugin-rhel9:1778644858"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4.2",
    "release_date" : "2026-05-20T00:00:00Z",
    "advisory" : "RHSA-2026:17469",
    "cpe" : "cpe:/a:redhat:openshift:4.20::el9",
    "package" : "openshift4/nmstate-console-plugin-rhel9:1778645008"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/cephcsi-rhel9:1778076673"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/mcg-core-rhel9:1778076741"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/mcg-rhel9-operator:1778076916"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/ocs-client-console-rhel9:1778077421"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/ocs-client-rhel9-operator:1778076861"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/ocs-metrics-exporter-rhel9:1778077066"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/ocs-rhel9-operator:1778077002"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-cli-rhel9:1778077164"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-console-rhel9:1778077913"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-cosi-sidecar-rhel9:1778077379"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-csi-addons-rhel9-operator:1778077455"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-csi-addons-sidecar-rhel9:1778077447"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-multicluster-console-rhel9:1778078096"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-multicluster-rhel9-operator:1778077527"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-must-gather-rhel9:1778077651"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odf-rhel9-operator:1778077920"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/odr-rhel9-operator:1778077737"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.16",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17549",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.16::el9",
    "package" : "odf4/rook-ceph-rhel9-operator:1778077839"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/cephcsi-rhel9:1778049594"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/cephcsi-rhel9-operator:1778049298"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/mcg-core-rhel9:1778049745"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/mcg-rhel9-operator:1778049753"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/ocs-client-console-rhel9:1778050558"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/ocs-client-rhel9-operator:1778049818"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/ocs-metrics-exporter-rhel9:1778049878"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/ocs-rhel9-operator:1778049920"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-cli-rhel9:1778049945"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-console-rhel9:1778060364"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-cosi-sidecar-rhel9:1778050037"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-csi-addons-rhel9-operator:1778050035"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-csi-addons-sidecar-rhel9:1778050048"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-multicluster-console-rhel9:1778050508"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-multicluster-rhel9-operator:1778050119"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-must-gather-rhel9:1778050290"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odf-rhel9-operator:1778059723"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/odr-rhel9-operator:1778050352"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.17",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17550",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.17::el9",
    "package" : "odf4/rook-ceph-rhel9-operator:1778050482"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/cephcsi-rhel9:1778045210"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/cephcsi-rhel9-operator:1778044961"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/mcg-core-rhel9:1778045359"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/mcg-rhel9-operator:1778045374"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/ocs-client-console-rhel9:1778045891"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/ocs-client-rhel9-operator:1778045472"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/ocs-metrics-exporter-rhel9:1778045534"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/ocs-rhel9-operator:1778045524"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-cli-rhel9:1778045587"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-console-rhel9:1778046067"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-cosi-sidecar-rhel9:1778045627"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-csi-addons-rhel9-operator:1778045731"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-csi-addons-sidecar-rhel9:1778045700"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-multicluster-console-rhel9:1778046234"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-multicluster-rhel9-operator:1778045792"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-must-gather-rhel9:1778045858"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odf-rhel9-operator:1778045945"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/odr-rhel9-operator:1778045931"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.18",
    "release_date" : "2026-05-14T00:00:00Z",
    "advisory" : "RHSA-2026:17547",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.18::el9",
    "package" : "odf4/rook-ceph-rhel9-operator:1778046079"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/cephcsi-rhel9:1776079019"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/cephcsi-rhel9-operator:1776706744"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/mcg-core-rhel9:1776707205"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/mcg-rhel9-operator:1776707231"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/ocs-client-console-rhel9:1776707760"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/ocs-client-rhel9-operator:1776707301"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/ocs-metrics-exporter-rhel9:1776079295"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/ocs-rhel9-operator:1776707362"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-cli-rhel9:1776707418"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-cloudnative-pg-rhel9-operator:1776707377"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-console-rhel9:1776707947"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-cosi-sidecar-rhel9:1776707456"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-csi-addons-rhel9-operator:1776707526"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-csi-addons-sidecar-rhel9:1776707526"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-multicluster-console-rhel9:1776707945"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-multicluster-rhel9-operator:1776707569"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-must-gather-rhel9:1776707724"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odf-rhel9-operator:1776707763"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/odr-rhel9-operator:1776707771"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.19",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12279",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.19::el9",
    "package" : "odf4/rook-ceph-rhel9-operator:1776079774"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/cephcsi-rhel9:1775822432"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/cephcsi-rhel9-operator:1776403457"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/mcg-core-rhel9:1776403991"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/mcg-rhel9-operator:1776404009"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/ocs-client-console-rhel9:1776404539"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/ocs-client-rhel9-operator:1776404060"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/ocs-metrics-exporter-rhel9:1775822689"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/ocs-rhel9-operator:1776404131"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-cli-rhel9:1776406225"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-cloudnative-pg-rhel9-operator:1776406131"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-console-rhel9:1776406770"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-cosi-sidecar-rhel9:1776406247"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-csi-addons-rhel9-operator:1776406286"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-csi-addons-sidecar-rhel9:1776406291"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-external-snapshotter-rhel9-operator:1776406284"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-external-snapshotter-sidecar-rhel9:1776406291"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-multicluster-console-rhel9:1776406771"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-multicluster-rhel9-operator:1776406384"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-must-gather-rhel9:1776406540"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odf-rhel9-operator:1776406595"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/odr-rhel9-operator:1776406594"
  }, {
    "product_name" : "Red Hat Openshift Data Foundation 4.2",
    "release_date" : "2026-04-30T00:00:00Z",
    "advisory" : "RHSA-2026:12277",
    "cpe" : "cpe:/a:redhat:openshift_data_foundation:4.20::el9",
    "package" : "odf4/rook-ceph-rhel9-operator:1775823207"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces 3.27",
    "release_date" : "2026-04-23T00:00:00Z",
    "advisory" : "RHSA-2026:10175",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3.27::el9",
    "package" : "devspaces/code-rhel9:1776744110"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces 3.27",
    "release_date" : "2026-04-23T00:00:00Z",
    "advisory" : "RHSA-2026:10175",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3.27::el9",
    "package" : "devspaces/dashboard-rhel9:1776795511"
  }, {
    "product_name" : "Red Hat OpenShift Dev Spaces 3.27",
    "release_date" : "2026-04-23T00:00:00Z",
    "advisory" : "RHSA-2026:10175",
    "cpe" : "cpe:/a:redhat:openshift_devspaces:3.27::el9",
    "package" : "devspaces/openvsx-rhel9:1776716842"
  }, {
    "product_name" : "Red Hat OpenShift distributed tracing 3.9.3",
    "release_date" : "2026-04-21T00:00:00Z",
    "advisory" : "RHSA-2026:9385",
    "cpe" : "cpe:/a:redhat:openshift_distributed_tracing:3.9::el9",
    "package" : "rhosdt/tempo-jaeger-query-rhel9:1776435608"
  }, {
    "product_name" : "Red Hat OpenShift GitOps 1.19",
    "release_date" : "2026-05-26T00:00:00Z",
    "advisory" : "RHSA-2026:20943",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1.19::el8",
    "package" : "openshift-gitops-1/console-plugin-rhel8:1779210530"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.6",
    "release_date" : "2026-04-16T00:00:00Z",
    "advisory" : "RHSA-2026:8483",
    "cpe" : "cpe:/a:redhat:service_mesh:2.6::el8",
    "package" : "openshift-service-mesh/kiali-ossmc-rhel8:1776202125"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 2.6",
    "release_date" : "2026-04-16T00:00:00Z",
    "advisory" : "RHSA-2026:8483",
    "cpe" : "cpe:/a:redhat:service_mesh:2.6::el8",
    "package" : "openshift-service-mesh/kiali-rhel8:1776191302"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3",
    "release_date" : "2026-04-16T00:00:00Z",
    "advisory" : "RHSA-2026:8484",
    "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9",
    "package" : "openshift-service-mesh/kiali-ossmc-rhel9:1776151124"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3",
    "release_date" : "2026-04-16T00:00:00Z",
    "advisory" : "RHSA-2026:8484",
    "cpe" : "cpe:/a:redhat:service_mesh:3.0::el9",
    "package" : "openshift-service-mesh/kiali-rhel9:1776151272"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.1",
    "release_date" : "2026-04-16T00:00:00Z",
    "advisory" : "RHSA-2026:8490",
    "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9",
    "package" : "openshift-service-mesh/kiali-ossmc-rhel9:1776151106"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.1",
    "release_date" : "2026-04-16T00:00:00Z",
    "advisory" : "RHSA-2026:8490",
    "cpe" : "cpe:/a:redhat:service_mesh:3.1::el9",
    "package" : "openshift-service-mesh/kiali-rhel9:1776151270"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.2",
    "release_date" : "2026-04-16T00:00:00Z",
    "advisory" : "RHSA-2026:8491",
    "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9",
    "package" : "openshift-service-mesh/kiali-ossmc-rhel9:1776155669"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.2",
    "release_date" : "2026-04-16T00:00:00Z",
    "advisory" : "RHSA-2026:8491",
    "cpe" : "cpe:/a:redhat:service_mesh:3.2::el9",
    "package" : "openshift-service-mesh/kiali-rhel9:1776149682"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.3",
    "release_date" : "2026-04-16T00:00:00Z",
    "advisory" : "RHSA-2026:8493",
    "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9",
    "package" : "openshift-service-mesh/kiali-ossmc-rhel9:1776151134"
  }, {
    "product_name" : "Red Hat OpenShift Service Mesh 3.3",
    "release_date" : "2026-04-16T00:00:00Z",
    "advisory" : "RHSA-2026:8493",
    "cpe" : "cpe:/a:redhat:service_mesh:3.3::el9",
    "package" : "openshift-service-mesh/kiali-rhel9:1776151277"
  }, {
    "product_name" : "Red Hat Satellite 6.18",
    "release_date" : "2026-05-07T00:00:00Z",
    "advisory" : "RHSA-2026:14870",
    "cpe" : "cpe:/a:redhat:satellite:6.18::el9",
    "package" : "satellite/iop-advisor-frontend-rhel9:1777911535"
  }, {
    "product_name" : "Red Hat Satellite 6.18",
    "release_date" : "2026-05-07T00:00:00Z",
    "advisory" : "RHSA-2026:14871",
    "cpe" : "cpe:/a:redhat:satellite:6.18::el9",
    "package" : "satellite/iop-host-inventory-frontend-rhel9:1777498806"
  }, {
    "product_name" : "Red Hat Satellite 6.18",
    "release_date" : "2026-04-16T00:00:00Z",
    "advisory" : "RHSA-2026:8498",
    "cpe" : "cpe:/a:redhat:satellite:6.18::el9",
    "package" : "satellite/iop-remediations-rhel9:1776194798"
  }, {
    "product_name" : "Red Hat Trusted Artifact Signer 1.3",
    "release_date" : "2026-04-23T00:00:00Z",
    "advisory" : "RHSA-2026:10131",
    "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1.3::el9",
    "package" : "rhtas/rekor-search-ui-rhel9:1776330093"
  } ],
  "package_state" : [ {
    "product_name" : "Confidential Compute Attestation",
    "fix_state" : "Affected",
    "package_name" : "openshift-sandboxed-containers/osc-pccs",
    "cpe" : "cpe:/a:redhat:confidential_compute_attestation:1"
  }, {
    "product_name" : "Cryostat 4",
    "fix_state" : "Affected",
    "package_name" : "lodash",
    "cpe" : "cpe:/a:redhat:cryostat:4"
  }, {
    "product_name" : "Gatekeeper 3",
    "fix_state" : "Not affected",
    "package_name" : "gatekeeper/gatekeeper-rhel9",
    "cpe" : "cpe:/a:redhat:gatekeeper:3"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-logging/cluster-logging-operator-bundle",
    "cpe" : "cpe:/a:redhat:logging:5"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-logging/cluster-logging-rhel9-operator",
    "cpe" : "cpe:/a:redhat:logging:5"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-logging/elasticsearch6-rhel9",
    "cpe" : "cpe:/a:redhat:logging:5"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-logging/elasticsearch-operator-bundle",
    "cpe" : "cpe:/a:redhat:logging:5"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-logging/elasticsearch-proxy-rhel9",
    "cpe" : "cpe:/a:redhat:logging:5"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-logging/elasticsearch-rhel9-operator",
    "cpe" : "cpe:/a:redhat:logging:5"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-logging/eventrouter-rhel9",
    "cpe" : "cpe:/a:redhat:logging:5"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-logging/fluentd-rhel9",
    "cpe" : "cpe:/a:redhat:logging:5"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-logging/kibana6-rhel8",
    "cpe" : "cpe:/a:redhat:logging:5"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-logging/log-file-metric-exporter-rhel9",
    "cpe" : "cpe:/a:redhat:logging:5"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-logging/logging-curator5-rhel9",
    "cpe" : "cpe:/a:redhat:logging:5"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-logging/logging-view-plugin-rhel9",
    "cpe" : "cpe:/a:redhat:logging:5"
  }, {
    "product_name" : "Logging Subsystem for Red Hat OpenShift",
    "fix_state" : "Affected",
    "package_name" : "openshift-logging/vector-rhel9",
    "cpe" : "cpe:/a:redhat:logging:5"
  }, {
    "product_name" : "Migration Toolkit for Applications 8",
    "fix_state" : "Affected",
    "package_name" : "mta/mta-ui-rhel9",
    "cpe" : "cpe:/a:redhat:migration_toolkit_applications:8"
  }, {
    "product_name" : "Migration Toolkit for Containers",
    "fix_state" : "Affected",
    "package_name" : "rhmtc/openshift-migration-ui-rhel8",
    "cpe" : "cpe:/a:redhat:rhmt:1"
  }, {
    "product_name" : "Multicluster Engine for Kubernetes",
    "fix_state" : "Not affected",
    "package_name" : "multicluster-engine/console-mce-rhel9",
    "cpe" : "cpe:/a:redhat:multicluster_engine"
  }, {
    "product_name" : "Node HealthCheck Operator",
    "fix_state" : "Affected",
    "package_name" : "workload-availability/node-healthcheck-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:workload_availability_nhc:0"
  }, {
    "product_name" : "Node HealthCheck Operator",
    "fix_state" : "Affected",
    "package_name" : "workload-availability/node-healthcheck-operator-bundle",
    "cpe" : "cpe:/a:redhat:workload_availability_nhc:0"
  }, {
    "product_name" : "Node HealthCheck Operator",
    "fix_state" : "Affected",
    "package_name" : "workload-availability/node-healthcheck-rhel9-operator",
    "cpe" : "cpe:/a:redhat:workload_availability_nhc:0"
  }, {
    "product_name" : "Node HealthCheck Operator",
    "fix_state" : "Affected",
    "package_name" : "workload-availability/node-remediation-console-rhel8",
    "cpe" : "cpe:/a:redhat:workload_availability_nhc:0"
  }, {
    "product_name" : "Node HealthCheck Operator",
    "fix_state" : "Affected",
    "package_name" : "workload-availability/node-remediation-console-rhel9",
    "cpe" : "cpe:/a:redhat:workload_availability_nhc:0"
  }, {
    "product_name" : "OpenShift Lightspeed",
    "fix_state" : "Affected",
    "package_name" : "openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_lightspeed"
  }, {
    "product_name" : "OpenShift Lightspeed",
    "fix_state" : "Affected",
    "package_name" : "openshift-lightspeed/lightspeed-console-plugin-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_lightspeed"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Affected",
    "package_name" : "openshift-pipelines/pipelines-console-plugin-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Pipelines",
    "fix_state" : "Affected",
    "package_name" : "openshift-pipelines/pipelines-hub-ui-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_pipelines:1"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Not affected",
    "package_name" : "openshift-service-mesh/kiali-operator-bundle",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Not affected",
    "package_name" : "openshift-service-mesh/kiali-rhel9-operator",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "Red Hat 3scale API Management Platform 2",
    "fix_state" : "Will not fix",
    "package_name" : "3scale-amp20/system",
    "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2"
  }, {
    "product_name" : "Red Hat 3scale API Management Platform 2",
    "fix_state" : "Will not fix",
    "package_name" : "3scale-amp21/system",
    "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2"
  }, {
    "product_name" : "Red Hat 3scale API Management Platform 2",
    "fix_state" : "Will not fix",
    "package_name" : "3scale-amp22/system",
    "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2"
  }, {
    "product_name" : "Red Hat 3scale API Management Platform 2",
    "fix_state" : "Will not fix",
    "package_name" : "3scale-amp24/system",
    "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2"
  }, {
    "product_name" : "Red Hat 3scale API Management Platform 2",
    "fix_state" : "Will not fix",
    "package_name" : "3scale-amp25/system",
    "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2"
  }, {
    "product_name" : "Red Hat 3scale API Management Platform 2",
    "fix_state" : "Will not fix",
    "package_name" : "3scale-amp26/system",
    "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2"
  }, {
    "product_name" : "Red Hat 3scale API Management Platform 2",
    "fix_state" : "Will not fix",
    "package_name" : "3scale-amp2/system-rhel7",
    "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2"
  }, {
    "product_name" : "Red Hat 3scale API Management Platform 2",
    "fix_state" : "Affected",
    "package_name" : "3scale-amp2/system-rhel8",
    "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2"
  }, {
    "product_name" : "Red Hat 3scale API Management Platform 2",
    "fix_state" : "Affected",
    "package_name" : "3scale-amp2/system-rhel9",
    "cpe" : "cpe:/a:redhat:red_hat_3scale_amp:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Management for Kubernetes 2",
    "fix_state" : "Not affected",
    "package_name" : "rhacm2/console-rhel9",
    "cpe" : "cpe:/a:redhat:acm:2"
  }, {
    "product_name" : "Red Hat Advanced Cluster Security 4",
    "fix_state" : "Affected",
    "package_name" : "advanced-cluster-security/rhacs-main-rhel8",
    "cpe" : "cpe:/a:redhat:advanced_cluster_security:4"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "ansible-automation-platform-26/gateway-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Affected",
    "package_name" : "ansible-automation-platform/automation-dashboard-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Will not fix",
    "package_name" : "ansible-automation-platform-tech-preview/automation-dashboard-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Affected",
    "package_name" : "ansible-on-clouds/aoc-azure-aap-installer-rhel9",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Will not fix",
    "package_name" : "automation-controller",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "automation-eda-controller",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Affected",
    "package_name" : "automation-gateway",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Affected",
    "package_name" : "automation-hub",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Affected",
    "package_name" : "automation-platform-ui",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "python3.11-galaxy-ng",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "python3.12-galaxy-ng",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "python3x-galaxy-ng",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Not affected",
    "package_name" : "python-galaxy-ng",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat build of Apache Camel - HawtIO 4",
    "fix_state" : "Affected",
    "package_name" : "lodash",
    "cpe" : "cpe:/a:redhat:apache_camel_hawtio:4"
  }, {
    "product_name" : "Red Hat build of Apicurio Registry 2",
    "fix_state" : "Affected",
    "package_name" : "lodash",
    "cpe" : "cpe:/a:redhat:service_registry:2"
  }, {
    "product_name" : "Red Hat build of Apicurio Registry 3",
    "fix_state" : "Affected",
    "package_name" : "apicurio/apicurio-registry-ui-rhel8",
    "cpe" : "cpe:/a:redhat:apicurio_registry:3"
  }, {
    "product_name" : "Red Hat build of Apicurio Registry 3",
    "fix_state" : "Affected",
    "package_name" : "apicurio/apicurio-registry-ui-rhel9",
    "cpe" : "cpe:/a:redhat:apicurio_registry:3"
  }, {
    "product_name" : "Red Hat build of Apicurio Registry 3",
    "fix_state" : "Affected",
    "package_name" : "apicurio/apicurio-studio-ui-rhel8",
    "cpe" : "cpe:/a:redhat:apicurio_registry:3"
  }, {
    "product_name" : "Red Hat Build of Keycloak",
    "fix_state" : "Will not fix",
    "package_name" : "lodash",
    "cpe" : "cpe:/a:redhat:build_keycloak:"
  }, {
    "product_name" : "Red Hat Build of Podman Desktop",
    "fix_state" : "Affected",
    "package_name" : "podman-desktop-macos-1-0",
    "cpe" : "cpe:/a:redhat:podman_desktop:1"
  }, {
    "product_name" : "Red Hat Build of Podman Desktop",
    "fix_state" : "Affected",
    "package_name" : "podman-desktop-windows-1-0",
    "cpe" : "cpe:/a:redhat:podman_desktop:1"
  }, {
    "product_name" : "Red Hat Connectivity Link 1",
    "fix_state" : "Affected",
    "package_name" : "rhcl-1/rhcl-console-plugin-rhel9",
    "cpe" : "cpe:/a:redhat:connectivity_link:1"
  }, {
    "product_name" : "Red Hat Data Grid 8",
    "fix_state" : "Affected",
    "package_name" : "lodash",
    "cpe" : "cpe:/a:redhat:jboss_data_grid:8"
  }, {
    "product_name" : "Red Hat Developer Hub",
    "fix_state" : "Will not fix",
    "package_name" : "rhdh/backstage-community-plugin-catalog-backend-module-scaffolder-relation-processor",
    "cpe" : "cpe:/a:redhat:rhdh:1"
  }, {
    "product_name" : "Red Hat Directory Server 11",
    "fix_state" : "Not affected",
    "package_name" : "redhat-ds:11/389-ds-base",
    "cpe" : "cpe:/a:redhat:directory_server:11"
  }, {
    "product_name" : "Red Hat Directory Server 12",
    "fix_state" : "Not affected",
    "package_name" : "redhat-ds:12/389-ds-base",
    "cpe" : "cpe:/a:redhat:directory_server:12"
  }, {
    "product_name" : "Red Hat Directory Server 13",
    "fix_state" : "Not affected",
    "package_name" : "389-ds-base",
    "cpe" : "cpe:/a:redhat:directory_server:13"
  }, {
    "product_name" : "Red Hat Discovery 2",
    "fix_state" : "Affected",
    "package_name" : "discovery/discovery-ui-rhel9",
    "cpe" : "cpe:/a:redhat:discovery:2::el9"
  }, {
    "product_name" : "Red Hat Edge Manager 1",
    "fix_state" : "Affected",
    "package_name" : "rhem/flightctl-ui-ocp-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:1"
  }, {
    "product_name" : "Red Hat Edge Manager 1",
    "fix_state" : "Affected",
    "package_name" : "rhem/flightctl-ui-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "ceph",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "cockpit",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "cockpit-files",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "cockpit-image-builder",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "cockpit-machines",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "cockpit-podman",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "cockpit-session-recording",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "firefox",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "gjs",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "grafana",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10",
    "impact" : "moderate"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "grafana-pcp",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10",
    "impact" : "moderate"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "ipa",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "linux-sgx",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "qt6-qtbase",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "subscription-manager-cockpit",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "thunderbird",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Not affected",
    "package_name" : "firefox",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Affected",
    "package_name" : "cockpit",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Will not fix",
    "package_name" : "cockpit-appstream",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Affected",
    "package_name" : "container-tools:rhel8/cockpit-podman",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "firefox",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "grafana",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8",
    "impact" : "moderate"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "grafana-pcp",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8",
    "impact" : "moderate"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "mozjs60",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Affected",
    "package_name" : "pcs",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "qt5-qtbase",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "thunderbird",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "ceph",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "cockpit",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "cockpit-files",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "cockpit-machines",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "cockpit-podman",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "firefox",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "gjs",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "grafana",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9",
    "impact" : "moderate"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "grafana-pcp",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9",
    "impact" : "moderate"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "ipa",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "linux-sgx",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "qt5-qtbase",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "subscription-manager-cockpit",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "thunderbird",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3",
    "fix_state" : "Affected",
    "package_name" : "rhelai3/bootc-cuda-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3",
    "fix_state" : "Affected",
    "package_name" : "rhelai3/bootc-rocm-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3"
  }, {
    "product_name" : "Red Hat Enterprise Linux AI (RHEL AI) 3",
    "fix_state" : "Affected",
    "package_name" : "rhelai3/disk-image-cuda-rhel9",
    "cpe" : "cpe:/a:redhat:enterprise_linux_ai:3"
  }, {
    "product_name" : "Red Hat Fuse 7",
    "fix_state" : "Will not fix",
    "package_name" : "lodash",
    "cpe" : "cpe:/a:redhat:jboss_fuse:7"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7",
    "fix_state" : "Will not fix",
    "package_name" : "lodash",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:7"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 8",
    "fix_state" : "Not affected",
    "package_name" : "lodash",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:8"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform Expansion Pack",
    "fix_state" : "Not affected",
    "package_name" : "lodash",
    "cpe" : "cpe:/a:redhat:jbosseapxp"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "rhoai/odh-dashboard-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-kf-notebook-controller-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-mlflow-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "rhoai/odh-mod-arch-maas-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Affected",
    "package_name" : "rhoai/odh-model-registry-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-notebook-controller-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Not affected",
    "package_name" : "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-agent-installer-ui-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-console",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-console-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-monitoring-plugin-rhel9",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Affected",
    "package_name" : "openshift-gitops-1/argocd-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift GitOps",
    "fix_state" : "Affected",
    "package_name" : "openshift-gitops-1/argocd-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_gitops:1"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Affected",
    "package_name" : "container-native-virtualization/kubevirt-console-plugin",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat OpenShift Virtualization 4",
    "fix_state" : "Not affected",
    "package_name" : "container-native-virtualization/kubevirt-console-plugin-rhel9",
    "cpe" : "cpe:/a:redhat:container_native_virtualization:4"
  }, {
    "product_name" : "Red Hat Process Automation 7",
    "fix_state" : "Affected",
    "package_name" : "lodash",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
  }, {
    "product_name" : "Red Hat Quay 3",
    "fix_state" : "Not affected",
    "package_name" : "quay/quay-rhel8",
    "cpe" : "cpe:/a:redhat:quay:3"
  }, {
    "product_name" : "Red Hat Quay 3",
    "fix_state" : "Not affected",
    "package_name" : "quay/quay-rhel9",
    "cpe" : "cpe:/a:redhat:quay:3"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Affected",
    "package_name" : "nodejs-babel-plugin-transform-class-properties",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Affected",
    "package_name" : "nodejs-babel-preset-react",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Affected",
    "package_name" : "nodejs-formik",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Affected",
    "package_name" : "nodejs-openshift-dynamic-plugin-sdk",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Affected",
    "package_name" : "nodejs-patternfly-react",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Affected",
    "package_name" : "nodejs-patternfly-react-charts",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Affected",
    "package_name" : "nodejs-patternfly-react-extensions",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Affected",
    "package_name" : "nodejs-yup",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Affected",
    "package_name" : "satellite/iop-vulnerability-frontend-rhel9",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Single Sign-On 7",
    "fix_state" : "Will not fix",
    "package_name" : "lodash",
    "cpe" : "cpe:/a:redhat:red_hat_single_sign_on:7"
  }, {
    "product_name" : "Red Hat Trusted Artifact Signer",
    "fix_state" : "Not affected",
    "package_name" : "rhtas/rhtas-console-ui-rhel9",
    "cpe" : "cpe:/a:redhat:trusted_artifact_signer:1"
  }, {
    "product_name" : "Red Hat Trusted Profile Analyzer",
    "fix_state" : "Affected",
    "package_name" : "rhtpa/rhtpa-trustification-service-rhel9",
    "cpe" : "cpe:/a:redhat:trusted_profile_analyzer:2"
  }, {
    "product_name" : "Self-service automation portal 2",
    "fix_state" : "Affected",
    "package_name" : "ansible-automation-platform/automation-portal",
    "cpe" : "cpe:/a:redhat:ansible_portal:2"
  }, {
    "product_name" : "streams for Apache Kafka 2",
    "fix_state" : "Affected",
    "package_name" : "lodash",
    "cpe" : "cpe:/a:redhat:amq_streams:2"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2026-4800\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-4800\nhttps://cna.openjsf.org/security-advisories.html\nhttps://github.com/advisories/GHSA-35jh-r3h4-6jhm\nhttps://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c" ],
  "name" : "CVE-2026-4800",
  "mitigation" : {
    "value" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
    "lang" : "en:us"
  },
  "csaw" : false
}