{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "netty-4.1.124-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the netty-4.1.124-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2025-15484",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15484-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-55163 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-55163/"
      }
    ],
    "title": "netty-4.1.124-1.1 on GA media",
    "tracking": {
      "current_release_date": "2025-08-22T00:00:00Z",
      "generator": {
        "date": "2025-08-22T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2025:15484-1",
      "initial_release_date": "2025-08-22T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-08-22T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "netty-4.1.124-1.1.aarch64",
                "product": {
                  "name": "netty-4.1.124-1.1.aarch64",
                  "product_id": "netty-4.1.124-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "netty-bom-4.1.124-1.1.aarch64",
                "product": {
                  "name": "netty-bom-4.1.124-1.1.aarch64",
                  "product_id": "netty-bom-4.1.124-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "netty-javadoc-4.1.124-1.1.aarch64",
                "product": {
                  "name": "netty-javadoc-4.1.124-1.1.aarch64",
                  "product_id": "netty-javadoc-4.1.124-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "netty-parent-4.1.124-1.1.aarch64",
                "product": {
                  "name": "netty-parent-4.1.124-1.1.aarch64",
                  "product_id": "netty-parent-4.1.124-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "netty-4.1.124-1.1.ppc64le",
                "product": {
                  "name": "netty-4.1.124-1.1.ppc64le",
                  "product_id": "netty-4.1.124-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "netty-bom-4.1.124-1.1.ppc64le",
                "product": {
                  "name": "netty-bom-4.1.124-1.1.ppc64le",
                  "product_id": "netty-bom-4.1.124-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "netty-javadoc-4.1.124-1.1.ppc64le",
                "product": {
                  "name": "netty-javadoc-4.1.124-1.1.ppc64le",
                  "product_id": "netty-javadoc-4.1.124-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "netty-parent-4.1.124-1.1.ppc64le",
                "product": {
                  "name": "netty-parent-4.1.124-1.1.ppc64le",
                  "product_id": "netty-parent-4.1.124-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "netty-4.1.124-1.1.s390x",
                "product": {
                  "name": "netty-4.1.124-1.1.s390x",
                  "product_id": "netty-4.1.124-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "netty-bom-4.1.124-1.1.s390x",
                "product": {
                  "name": "netty-bom-4.1.124-1.1.s390x",
                  "product_id": "netty-bom-4.1.124-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "netty-javadoc-4.1.124-1.1.s390x",
                "product": {
                  "name": "netty-javadoc-4.1.124-1.1.s390x",
                  "product_id": "netty-javadoc-4.1.124-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "netty-parent-4.1.124-1.1.s390x",
                "product": {
                  "name": "netty-parent-4.1.124-1.1.s390x",
                  "product_id": "netty-parent-4.1.124-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "netty-4.1.124-1.1.x86_64",
                "product": {
                  "name": "netty-4.1.124-1.1.x86_64",
                  "product_id": "netty-4.1.124-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "netty-bom-4.1.124-1.1.x86_64",
                "product": {
                  "name": "netty-bom-4.1.124-1.1.x86_64",
                  "product_id": "netty-bom-4.1.124-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "netty-javadoc-4.1.124-1.1.x86_64",
                "product": {
                  "name": "netty-javadoc-4.1.124-1.1.x86_64",
                  "product_id": "netty-javadoc-4.1.124-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "netty-parent-4.1.124-1.1.x86_64",
                "product": {
                  "name": "netty-parent-4.1.124-1.1.x86_64",
                  "product_id": "netty-parent-4.1.124-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-4.1.124-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-4.1.124-1.1.aarch64"
        },
        "product_reference": "netty-4.1.124-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-4.1.124-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-4.1.124-1.1.ppc64le"
        },
        "product_reference": "netty-4.1.124-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-4.1.124-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-4.1.124-1.1.s390x"
        },
        "product_reference": "netty-4.1.124-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-4.1.124-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-4.1.124-1.1.x86_64"
        },
        "product_reference": "netty-4.1.124-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-bom-4.1.124-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.aarch64"
        },
        "product_reference": "netty-bom-4.1.124-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-bom-4.1.124-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.ppc64le"
        },
        "product_reference": "netty-bom-4.1.124-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-bom-4.1.124-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.s390x"
        },
        "product_reference": "netty-bom-4.1.124-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-bom-4.1.124-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.x86_64"
        },
        "product_reference": "netty-bom-4.1.124-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-javadoc-4.1.124-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.aarch64"
        },
        "product_reference": "netty-javadoc-4.1.124-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-javadoc-4.1.124-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.ppc64le"
        },
        "product_reference": "netty-javadoc-4.1.124-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-javadoc-4.1.124-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.s390x"
        },
        "product_reference": "netty-javadoc-4.1.124-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-javadoc-4.1.124-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.x86_64"
        },
        "product_reference": "netty-javadoc-4.1.124-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-parent-4.1.124-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.aarch64"
        },
        "product_reference": "netty-parent-4.1.124-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-parent-4.1.124-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.ppc64le"
        },
        "product_reference": "netty-parent-4.1.124-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-parent-4.1.124-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.s390x"
        },
        "product_reference": "netty-parent-4.1.124-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netty-parent-4.1.124-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.x86_64"
        },
        "product_reference": "netty-parent-4.1.124-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-55163",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-55163"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit - which results in resource exhaustion and distributed denial of service. This issue has been patched in versions 4.1.124.Final and 4.2.4.Final.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:netty-4.1.124-1.1.aarch64",
          "openSUSE Tumbleweed:netty-4.1.124-1.1.ppc64le",
          "openSUSE Tumbleweed:netty-4.1.124-1.1.s390x",
          "openSUSE Tumbleweed:netty-4.1.124-1.1.x86_64",
          "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.aarch64",
          "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.ppc64le",
          "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.s390x",
          "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.x86_64",
          "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.aarch64",
          "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.ppc64le",
          "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.s390x",
          "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.x86_64",
          "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.aarch64",
          "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.ppc64le",
          "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.s390x",
          "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-55163",
          "url": "https://www.suse.com/security/cve/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1243888 for CVE-2025-55163",
          "url": "https://bugzilla.suse.com/1243888"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244252 for CVE-2025-55163",
          "url": "https://bugzilla.suse.com/1244252"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:netty-4.1.124-1.1.aarch64",
            "openSUSE Tumbleweed:netty-4.1.124-1.1.ppc64le",
            "openSUSE Tumbleweed:netty-4.1.124-1.1.s390x",
            "openSUSE Tumbleweed:netty-4.1.124-1.1.x86_64",
            "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.aarch64",
            "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.ppc64le",
            "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.s390x",
            "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.x86_64",
            "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.aarch64",
            "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.ppc64le",
            "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.s390x",
            "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.x86_64",
            "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.aarch64",
            "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.ppc64le",
            "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.s390x",
            "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:netty-4.1.124-1.1.aarch64",
            "openSUSE Tumbleweed:netty-4.1.124-1.1.ppc64le",
            "openSUSE Tumbleweed:netty-4.1.124-1.1.s390x",
            "openSUSE Tumbleweed:netty-4.1.124-1.1.x86_64",
            "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.aarch64",
            "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.ppc64le",
            "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.s390x",
            "openSUSE Tumbleweed:netty-bom-4.1.124-1.1.x86_64",
            "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.aarch64",
            "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.ppc64le",
            "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.s390x",
            "openSUSE Tumbleweed:netty-javadoc-4.1.124-1.1.x86_64",
            "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.aarch64",
            "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.ppc64le",
            "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.s390x",
            "openSUSE Tumbleweed:netty-parent-4.1.124-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-22T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-55163"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat build of Quarkus.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For more information, see the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release of Red Hat build of Quarkus 3.15.6.SP1 includes the following CVE fix:\n\n* netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability [quarkus-3.15] (CVE-2025-55163)\n\nFor more information, see the release notes page listed in the References\nsection.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:14004",
        "url": "https://access.redhat.com/errata/RHSA-2025:14004"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/articles/4966181",
        "url": "https://access.redhat.com/articles/4966181"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/products/quarkus/",
        "url": "https://access.redhat.com/products/quarkus/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus\u0026downloadType=distributions\u0026version=3.15.6.SP1",
        "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus\u0026downloadType=distributions\u0026version=3.15.6.SP1"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_build_of_quarkus/3.15",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_build_of_quarkus/3.15"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14004.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat build of Quarkus 3.15.6.SP1 security update",
    "tracking": {
      "current_release_date": "2026-07-27T15:08:17+00:00",
      "generator": {
        "date": "2026-07-27T15:08:17+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2025:14004",
      "initial_release_date": "2025-08-19T13:50:26+00:00",
      "revision_history": [
        {
          "date": "2025-08-19T13:50:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-19T13:50:26+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-27T15:08:17+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Quarkus 3.15.6.SP1",
                "product": {
                  "name": "Red Hat build of Quarkus 3.15.6.SP1",
                  "product_id": "Red Hat build of Quarkus 3.15.6.SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quarkus:3.15::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Quarkus"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-55163",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-08-13T15:01:55.372237+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2388252"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the \"MadeYouReset\" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity. It is simple to exploit because it does not require authentication and could result in a denial of service (DoS). While some DoS flaws are classified as Moderate, \u201cMadeYouReset\u201d is Important because of the limited barriers (no specialized tooling or advanced scripting) to exploitation, which directly impacts service availability. The vulnerability arises from an implementation weakness in HTTP/2 stream reset handling \u2014 malformed client requests can trigger server-side resets without incrementing abuse counters, allowing an attacker to bypass built-in request throttling and overhead limits. Since these resets consume CPU and memory resources and can be generated at scale over a single TCP/TLS connection, a remote attacker could exhaust server capacity quickly, impacting all legitimate clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat build of Quarkus 3.15.6.SP1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "RHBZ#2388252",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/767506",
          "url": "https://kb.cert.org/vuls/id/767506"
        }
      ],
      "release_date": "2025-08-13T14:17:36.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-19T13:50:26+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat build of Quarkus 3.15.6.SP1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14004"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "Red Hat build of Quarkus 3.15.6.SP1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat build of Quarkus 3.15.6.SP1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat build of Quarkus.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For more information, see the CVE link in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release of Red Hat build of Quarkus 3.20.2.SP1 includes the following CVE fix:\n\n* netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability\n[quarkus-3.20] (CVE-2025-55163)\n\nFor more information, see the release notes page listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:14008",
        "url": "https://access.redhat.com/errata/RHSA-2025:14008"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/articles/4966181",
        "url": "https://access.redhat.com/articles/4966181"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/products/quarkus/",
        "url": "https://access.redhat.com/products/quarkus/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus\u0026downloadType=distributions\u0026version=3.20.2.SP1",
        "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus\u0026downloadType=distributions\u0026version=3.20.2.SP1"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_build_of_quarkus/3.20",
        "url": "https://docs.redhat.com/en/documentation/red_hat_build_of_quarkus/3.20"
      },
      {
        "category": "external",
        "summary": "QUARKUS-6475",
        "url": "https://issues.redhat.com/browse/QUARKUS-6475"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14008.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat build of Quarkus 3.20.2.SP1 security update",
    "tracking": {
      "current_release_date": "2026-07-27T15:44:36+00:00",
      "generator": {
        "date": "2026-07-27T15:44:36+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2025:14008",
      "initial_release_date": "2025-08-19T13:50:46+00:00",
      "revision_history": [
        {
          "date": "2025-08-19T13:50:46+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-19T13:50:46+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-27T15:44:36+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Quarkus 3.20.2.SP1",
                "product": {
                  "name": "Red Hat build of Quarkus 3.20.2.SP1",
                  "product_id": "Red Hat build of Quarkus 3.20.2.SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quarkus:3.20::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Quarkus"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-55163",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-08-13T15:01:55.372237+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2388252"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the \"MadeYouReset\" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity. It is simple to exploit because it does not require authentication and could result in a denial of service (DoS). While some DoS flaws are classified as Moderate, \u201cMadeYouReset\u201d is Important because of the limited barriers (no specialized tooling or advanced scripting) to exploitation, which directly impacts service availability. The vulnerability arises from an implementation weakness in HTTP/2 stream reset handling \u2014 malformed client requests can trigger server-side resets without incrementing abuse counters, allowing an attacker to bypass built-in request throttling and overhead limits. Since these resets consume CPU and memory resources and can be generated at scale over a single TCP/TLS connection, a remote attacker could exhaust server capacity quickly, impacting all legitimate clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat build of Quarkus 3.20.2.SP1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "RHBZ#2388252",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/767506",
          "url": "https://kb.cert.org/vuls/id/767506"
        }
      ],
      "release_date": "2025-08-13T14:17:36.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-19T13:50:46+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat build of Quarkus 3.20.2.SP1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14008"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "Red Hat build of Quarkus 3.20.2.SP1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat build of Quarkus 3.20.2.SP1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Build of Apache Camel 4.10 for Quarkus 3.20 update is now available (RHBQ 3.20.2.GA).\nThe purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "An update for Red Hat Build of Apache Camel 4.10 for Quarkus 3.20 update is now available (RHBQ 3.20.2.GA).\nThe purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products:\n\n* netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability (CVE-2025-55163)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:14197",
        "url": "https://access.redhat.com/errata/RHSA-2025:14197"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-55163",
        "url": "https://access.redhat.com/security/cve/CVE-2025-55163"
      },
      {
        "category": "external",
        "summary": "2388252",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14197.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10 for Quarkus 3.20 update is now available (RHBQ 3.20.2.GA)",
    "tracking": {
      "current_release_date": "2026-07-27T15:08:19+00:00",
      "generator": {
        "date": "2026-07-27T15:08:19+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2025:14197",
      "initial_release_date": "2025-08-20T19:33:32+00:00",
      "revision_history": [
        {
          "date": "2025-08-20T19:33:32+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-20T19:33:32+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-27T15:08:19+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Build of Apache Camel 4.10 for Quarkus 3.20",
                "product": {
                  "name": "Red Hat Build of Apache Camel 4.10 for Quarkus 3.20",
                  "product_id": "Red Hat Build of Apache Camel 4.10 for Quarkus 3.20",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:apache_camel_quarkus:3.20"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Build of Apache Camel"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-55163",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-08-13T15:01:55.372237+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2388252"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the \"MadeYouReset\" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity. It is simple to exploit because it does not require authentication and could result in a denial of service (DoS). While some DoS flaws are classified as Moderate, \u201cMadeYouReset\u201d is Important because of the limited barriers (no specialized tooling or advanced scripting) to exploitation, which directly impacts service availability. The vulnerability arises from an implementation weakness in HTTP/2 stream reset handling \u2014 malformed client requests can trigger server-side resets without incrementing abuse counters, allowing an attacker to bypass built-in request throttling and overhead limits. Since these resets consume CPU and memory resources and can be generated at scale over a single TCP/TLS connection, a remote attacker could exhaust server capacity quickly, impacting all legitimate clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Build of Apache Camel 4.10 for Quarkus 3.20"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "RHBZ#2388252",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/767506",
          "url": "https://kb.cert.org/vuls/id/767506"
        }
      ],
      "release_date": "2025-08-13T14:17:36.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-20T19:33:32+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\nThe References section of this erratum contains a download link (you must log in to download the update).\nRed Hat Product Security has rated this update as having a security impact of Important.",
          "product_ids": [
            "Red Hat Build of Apache Camel 4.10 for Quarkus 3.20"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14197"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "Red Hat Build of Apache Camel 4.10 for Quarkus 3.20"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Build of Apache Camel 4.10 for Quarkus 3.20"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat build of Apache Camel 4.10.6 for Spring Boot patch release and security update is now available.\n\nRed Hat Product Security has rated this update as having a security impact of\nImportant. A Common Vulnerability Scoring System (CVSS) base score, which gives\na detailed severity rating, is available for each vulnerability from the CVE\nlink(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat build of Apache Camel 4.10.6 for Spring Boot patch release and security update is now available.\n\nThe purpose of this text-only errata is to inform you about the security issues\nfixed.\n\nSecurity Fix(es):\n   \n* jetty-http2-client: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to \"MadeYouReset\" DoS attack through HTTP/2 control frames (CVE-2025-5115)\n\n* jetty-http2-client-transport: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to \"MadeYouReset\" DoS attack through HTTP/2 control frames (CVE-2025-5115)\n\n* jetty-http2-common: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to \"MadeYouReset\" DoS attack through HTTP/2 control frames (CVE-2025-5115)\n\n* jetty-http2-hpack: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to \"MadeYouReset\" DoS attack through HTTP/2 control frames (CVE-2025-5115)\n\n* jetty-http2-server: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to \"MadeYouReset\" DoS attack through HTTP/2 control frames (CVE-2025-5115)\n\n* netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability (CVE-2025-55163)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:14911",
        "url": "https://access.redhat.com/errata/RHSA-2025:14911"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2373310",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373310"
      },
      {
        "category": "external",
        "summary": "2388252",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14911.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10.6 for Spring Boot release.",
    "tracking": {
      "current_release_date": "2026-08-02T17:51:35+00:00",
      "generator": {
        "date": "2026-08-02T17:51:35+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.8"
        }
      },
      "id": "RHSA-2025:14911",
      "initial_release_date": "2025-08-28T18:38:33+00:00",
      "revision_history": [
        {
          "date": "2025-08-28T18:38:33+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-28T18:38:33+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-02T17:51:35+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9",
                "product": {
                  "name": "Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9",
                  "product_id": "Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:apache_camel_spring_boot:4.10"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Build of Apache Camel"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-5115",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2025-06-18T08:43:44.656000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2373310"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Jetty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the \"MadeYouReset\" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jetty: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to \"MadeYouReset\" DoS attack through HTTP/2 control frames",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity. It is simple to exploit because it does not require authentication and could result in a Denial of Service (DoS). While some DoS flaws are classified as Moderate, \u201cMadeYouReset\u201d is Important because of the limited barriers (no specialized tooling or advanced scripting) to exploitation which directly impacts service availability. The vulnerability arises from an implementation weakness in HTTP/2 stream reset handling \u2014 malformed client requests can trigger server-side resets without incrementing abuse counters, allowing an attacker to bypass built-in request throttling and overhead limits. Since these resets consume CPU and memory resources and can be generated at scale over a single TCP/TLS connection, a remote attacker could exhaust server capacity quickly, impacting all legitimate clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5115"
        },
        {
          "category": "external",
          "summary": "RHBZ#2373310",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2373310"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5115",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5115"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5115",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5115"
        },
        {
          "category": "external",
          "summary": "https://github.com/jetty/jetty.project/security/advisories/GHSA-mmxm-8w33-wc4h",
          "url": "https://github.com/jetty/jetty.project/security/advisories/GHSA-mmxm-8w33-wc4h"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/767506",
          "url": "https://kb.cert.org/vuls/id/767506"
        }
      ],
      "release_date": "2025-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-28T18:38:33+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14911"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jetty: HTTP/2 (including DNS over HTTPS) contains a design flaw and is vulnerable to \"MadeYouReset\" DoS attack through HTTP/2 control frames"
    },
    {
      "cve": "CVE-2025-55163",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-08-13T15:01:55.372237+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2388252"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the \"MadeYouReset\" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity. It is simple to exploit because it does not require authentication and could result in a denial of service (DoS). While some DoS flaws are classified as Moderate, \u201cMadeYouReset\u201d is Important because of the limited barriers (no specialized tooling or advanced scripting) to exploitation, which directly impacts service availability. The vulnerability arises from an implementation weakness in HTTP/2 stream reset handling \u2014 malformed client requests can trigger server-side resets without incrementing abuse counters, allowing an attacker to bypass built-in request throttling and overhead limits. Since these resets consume CPU and memory resources and can be generated at scale over a single TCP/TLS connection, a remote attacker could exhaust server capacity quickly, impacting all legitimate clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "RHBZ#2388252",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/767506",
          "url": "https://kb.cert.org/vuls/id/767506"
        }
      ],
      "release_date": "2025-08-13T14:17:36.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-08-28T18:38:33+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14911"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat build of Apache Camel 4.10.6 for Spring Boot 3.4.9"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "New Red Hat build of Cryostat 4.0.2 on RHEL 9 container images are now available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Cryostat 4 on RHEL 9 container images have been updated to fix several bugs.\n\nUsers of Cryostat 4 on RHEL 9 container images are advised to upgrade to these updated images, which contain backported patches to fix these bugs and add these enhancements. Users of these images are also encouraged to rebuild all container images that depend on these images.\n\nSecurity Fix(es):\n\n* cryostat: authentication bypass if Network Policies are disabled (CVE-2025-8415)\n* netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability (CVE-2025-55163)\n* form-data: Unsafe random function in form-data (CVE-2025-7783)\n\nYou can find images updated by this advisory in the Red Hat Container Catalog (see the References section).",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:14919",
        "url": "https://access.redhat.com/errata/RHSA-2025:14919"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2381959",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2381959"
      },
      {
        "category": "external",
        "summary": "2385773",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2385773"
      },
      {
        "category": "external",
        "summary": "2388252",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14919.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat build of Cryostat 4.0.2: new RHEL 9 container image security update",
    "tracking": {
      "current_release_date": "2026-08-07T10:08:42+00:00",
      "generator": {
        "date": "2026-08-07T10:08:42+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.12"
        }
      },
      "id": "RHSA-2025:14919",
      "initial_release_date": "2025-09-03T02:15:18+00:00",
      "revision_history": [
        {
          "date": "2025-09-03T02:15:18+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-09-03T02:15:18+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-07T10:08:42+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Cryostat 4 on RHEL 9",
                "product": {
                  "name": "Cryostat 4 on RHEL 9",
                  "product_id": "9Base-Cryostat-4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:cryostat:4::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Cryostat"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
                "product": {
                  "name": "cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
                  "product_id": "cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9\u0026tag=0.5.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
                "product": {
                  "name": "cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
                  "product_id": "cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
                "product": {
                  "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
                  "product_id": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
                "product": {
                  "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
                  "product_id": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
                "product": {
                  "name": "cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
                  "product_id": "cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-ose-oauth-proxy-rhel9\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
                "product": {
                  "name": "cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
                  "product_id": "cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
                "product": {
                  "name": "cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
                  "product_id": "cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
                "product": {
                  "name": "cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
                  "product_id": "cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
                "product": {
                  "name": "cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
                  "product_id": "cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
                "product": {
                  "name": "cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
                  "product_id": "cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
                "product": {
                  "name": "cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
                  "product_id": "cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9\u0026tag=4.0.2-3"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
                "product": {
                  "name": "cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
                  "product_id": "cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9\u0026tag=0.5.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
                "product": {
                  "name": "cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
                  "product_id": "cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
                "product": {
                  "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
                  "product_id": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
                "product": {
                  "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
                  "product_id": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
                "product": {
                  "name": "cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
                  "product_id": "cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-ose-oauth-proxy-rhel9\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
                "product": {
                  "name": "cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
                  "product_id": "cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
                "product": {
                  "name": "cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
                  "product_id": "cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
                "product": {
                  "name": "cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
                  "product_id": "cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
                "product": {
                  "name": "cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
                  "product_id": "cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
                "product": {
                  "name": "cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
                  "product_id": "cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9\u0026tag=4.0.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64",
                "product": {
                  "name": "cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64",
                  "product_id": "cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9\u0026tag=4.0.2-3"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64"
        },
        "product_reference": "cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64"
        },
        "product_reference": "cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64"
        },
        "product_reference": "cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64"
        },
        "product_reference": "cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64"
        },
        "product_reference": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64"
        },
        "product_reference": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64"
        },
        "product_reference": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64"
        },
        "product_reference": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64"
        },
        "product_reference": "cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64"
        },
        "product_reference": "cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64"
        },
        "product_reference": "cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64"
        },
        "product_reference": "cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64"
        },
        "product_reference": "cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64"
        },
        "product_reference": "cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64"
        },
        "product_reference": "cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64"
        },
        "product_reference": "cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64"
        },
        "product_reference": "cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64"
        },
        "product_reference": "cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64"
        },
        "product_reference": "cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64"
        },
        "product_reference": "cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64"
        },
        "product_reference": "cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64 as a component of Cryostat 4 on RHEL 9",
          "product_id": "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64"
        },
        "product_reference": "cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64",
        "relates_to_product_reference": "9Base-Cryostat-4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-7783",
      "cwe": {
        "id": "CWE-330",
        "name": "Use of Insufficiently Random Values"
      },
      "discovery_date": "2025-07-18T17:00:43.396637+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2381959"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data.\n\nThis presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "form-data: Unsafe random function in form-data",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw does not affect host systems. The impact of this vulnerability is limited to specific applications which integrate the `form-data` library. As a result the impact of this CVE is limited on RedHat systems.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-7783"
        },
        {
          "category": "external",
          "summary": "RHBZ#2381959",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2381959"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-7783",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783"
        },
        {
          "category": "external",
          "summary": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0",
          "url": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"
        },
        {
          "category": "external",
          "summary": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4",
          "url": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4"
        }
      ],
      "release_date": "2025-07-18T16:34:44.889000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-09-03T02:15:18+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14919"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "form-data: Unsafe random function in form-data"
    },
    {
      "cve": "CVE-2025-8415",
      "cwe": {
        "id": "CWE-289",
        "name": "Authentication Bypass by Alternate Name"
      },
      "discovery_date": "2025-07-31T13:30:18.157000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2385773"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in the Cryostat HTTP API. Cryostat\u0027s HTTP API binds to all network interfaces, allowing possible external visibility and access to the API port if Network Policies are disabled, allowing an unauthenticated, malicious attacker to jeopardize the environment.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "cryostat: authentication bypass if Network Policies are disabled",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-8415"
        },
        {
          "category": "external",
          "summary": "RHBZ#2385773",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2385773"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-8415",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-8415"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-8415",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8415"
        },
        {
          "category": "external",
          "summary": "https://github.com/cryostatio/cryostat/pull/1001",
          "url": "https://github.com/cryostatio/cryostat/pull/1001"
        },
        {
          "category": "external",
          "summary": "https://github.com/cryostatio/cryostat/releases/tag/v4.0.2",
          "url": "https://github.com/cryostatio/cryostat/releases/tag/v4.0.2"
        }
      ],
      "release_date": "2025-08-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-09-03T02:15:18+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14919"
        },
        {
          "category": "workaround",
          "details": "Cryostat is not vulnerable by default, as Network Policy is enabled and prevents this behavior. Make sure the Network Policies are enabled in Custom Resources and that the underlying cluster network stack supports Network Policies.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "cryostat: authentication bypass if Network Policies are disabled"
    },
    {
      "cve": "CVE-2025-55163",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-08-13T15:01:55.372237+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2388252"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the \"MadeYouReset\" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity. It is simple to exploit because it does not require authentication and could result in a denial of service (DoS). While some DoS flaws are classified as Moderate, \u201cMadeYouReset\u201d is Important because of the limited barriers (no specialized tooling or advanced scripting) to exploitation, which directly impacts service availability. The vulnerability arises from an implementation weakness in HTTP/2 stream reset handling \u2014 malformed client requests can trigger server-side resets without incrementing abuse counters, allowing an attacker to bypass built-in request throttling and overhead limits. Since these resets consume CPU and memory resources and can be generated at scale over a single TCP/TLS connection, a remote attacker could exhaust server capacity quickly, impacting all legitimate clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
          "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
          "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "RHBZ#2388252",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/767506",
          "url": "https://kb.cert.org/vuls/id/767506"
        }
      ],
      "release_date": "2025-08-13T14:17:36.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-09-03T02:15:18+00:00",
          "details": "You can download the Cryostat 4 on RHEL 9 container images that this update provides from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available in the Red Hat Container Catalog (see the References section).\n\nDockerfiles and scripts should be amended to refer to this new image specifically or to the latest image generally.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:14919"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:0e5ffd83db750fb85c1e6e268a6be392bf084558e9b07d29bb6b752b756f98e8_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:d6d38a85fabf58e7dabcc9088f0c5271f1f03616e883175ad67081232fd08189_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:98289ddd46c3b9e3ed22cb76f4f5372b28d84637f84e0e24fcfd75f1b6cdfc4c_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:a598e40bbe2ce6243d1eb583dc57041c4ced8a4a5bcba2d0a4f9d8decc8bfb5e_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:1b2c837ef2ae61f187d4d3b7be3f9fb3a2f8910d99a5b7d02929edb993631cc9_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:7c1d1bee4b41222a89ccff05f96c718c230779cd123c33ce5150c1c6df69abe4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:04c736cd3efff1a2d894bd7bfb2d982cc2de938aeb859ce01fe5c237275305a5_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:72e93e32df5c0af848dfae42aee3633069df0cbdaacfc4bb9c68b54a161c1bd9_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:52f04cfb6bbc0a04ef61a1d061e45dc4a44e98fba9413961d69a6a97cf45e084_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:808f35402b5b20c395a26436d6a121fb8e81ff56fd6a60e8e84ad8e4f64d37d4_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:a049c80f0fdbdd21ee6513c703b057aae78259e2077357b84a3faf01a002db1f_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-ose-oauth-proxy-rhel9@sha256:de2537a6036e88a9eb3821851b1f8e3fcaa069d46f18e9a999848058c2923872_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:2eef8c97381bc0c8418be415384f2cef5b59bcc2f286fe65fc18873d8719c628_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:577db510c36a906d7583f9daec87f1df593167ecaac881573a9fb9511e7786c0_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a2b8104352ac48cf5a076e0a4ab48e435535913e1f0301ba69bc7c4ff1ea70c2_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:a4dd6911c3fcd3b1fffcb24b54f798cfd1f1113020556685333d8c8e3857a9ca_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:54fd86c9f83b0a690b5a2effd8bb1c1a91440c284f5c7c64a603bb62bb915e6f_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:813522e91ba44510abfb6802cfbfe0dbdde1df678fb72c0954458d9485ff9469_amd64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:0468feecc78f056ed30ab07ec3d8b53d0be37f4a00d49009ea6e3f9b20c9c509_arm64",
            "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:415e55fd5a49c4de08af32f2efa76de4f5bbeeb48e868de5f8cdb79d7c8ce526_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:36f0386024588220c316c6dcc442a709491d5d6adb217ae1dd8dd1aca7c6b94a_amd64",
            "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:3c714df80db3d94b1e70cd81fd70b5f012f5e85b9cc974d8a56d0eb59174a823_arm64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Data Grid 8 is now available.\n \nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Data Grid is an in-memory, distributed, NoSQL datastore solution. It increases application response times and allows for dramatically improving performance while providing availability, reliability, and elastic scale.\n \nData Grid 8.5.5 replaces Data Grid 8.5.4 and includes bug fixes and enhancements. Find out more about Data Grid 8.5.5 in the Release Notes[3].\n\nSecurity Fix(es):\n\n*  CVE-2025-55163 netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability [jdg-8] (CVE-2025-55163)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:15612",
        "url": "https://access.redhat.com/errata/RHSA-2025:15612"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "JDG-7700",
        "url": "https://issues.redhat.com/browse/JDG-7700"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15612.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Data Grid 8.5.5 security update",
    "tracking": {
      "current_release_date": "2026-07-27T15:08:24+00:00",
      "generator": {
        "date": "2026-07-27T15:08:24+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2025:15612",
      "initial_release_date": "2025-09-10T11:57:53+00:00",
      "revision_history": [
        {
          "date": "2025-09-10T11:57:53+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-09-10T11:57:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-27T15:08:24+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Data Grid 8.5.5",
                "product": {
                  "name": "Red Hat Data Grid 8.5.5",
                  "product_id": "Red Hat Data Grid 8.5.5",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_data_grid:8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Data Grid"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-55163",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-08-13T15:01:55.372237+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2388252"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the \"MadeYouReset\" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity. It is simple to exploit because it does not require authentication and could result in a denial of service (DoS). While some DoS flaws are classified as Moderate, \u201cMadeYouReset\u201d is Important because of the limited barriers (no specialized tooling or advanced scripting) to exploitation, which directly impacts service availability. The vulnerability arises from an implementation weakness in HTTP/2 stream reset handling \u2014 malformed client requests can trigger server-side resets without incrementing abuse counters, allowing an attacker to bypass built-in request throttling and overhead limits. Since these resets consume CPU and memory resources and can be generated at scale over a single TCP/TLS connection, a remote attacker could exhaust server capacity quickly, impacting all legitimate clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Data Grid 8.5.5"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "RHBZ#2388252",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/767506",
          "url": "https://kb.cert.org/vuls/id/767506"
        }
      ],
      "release_date": "2025-08-13T14:17:36.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-09-10T11:57:53+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat Data Grid 8.5.5"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:15612"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "Red Hat Data Grid 8.5.5"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Data Grid 8.5.5"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Streams for Apache Kafka 2.9.2 is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Streams for Apache Kafka, based on the Apache Kafka project, offers a distributed\nbackbone that allows microservices and other applications to share data with\nextremely high throughput and extremely low latency.\n\nThis release of Red Hat Streams for Apache Kafka 2.9.2 serves as a replacement for Red Hat Streams for Apache Kafka 2.9.1, and includes security and bug fixes, and enhancements.\n\nSecurity Fix(es):\n* Cruise Control, Drain Cleaner: Netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability [amq-st-2.9] \"(CVE-2025-55163)\"\n* Kafka: org.apache.commons:commons-lang3 : Uncontrolled Recursion [amq-st-2.9] \"(CVE-2025-48924)\"",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:15697",
        "url": "https://access.redhat.com/errata/RHSA-2025:15697"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2379554",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2379554"
      },
      {
        "category": "external",
        "summary": "2388252",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15697.json"
      }
    ],
    "title": "Red Hat Security Advisory: Streams for Apache Kafka 2.9.2 release and security update",
    "tracking": {
      "current_release_date": "2026-08-04T13:43:03+00:00",
      "generator": {
        "date": "2026-08-04T13:43:03+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.8"
        }
      },
      "id": "RHSA-2025:15697",
      "initial_release_date": "2025-09-11T15:16:59+00:00",
      "revision_history": [
        {
          "date": "2025-09-11T15:16:59+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-09-11T15:16:59+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-04T13:43:03+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Streams for Apache Kafka 2.9.2",
                "product": {
                  "name": "Streams for Apache Kafka 2.9.2",
                  "product_id": "Streams for Apache Kafka 2.9.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:amq_streams:2.9::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-48924",
      "cwe": {
        "id": "CWE-674",
        "name": "Uncontrolled Recursion"
      },
      "discovery_date": "2025-07-11T15:01:08.754489+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2379554"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An uncontrolled recursion flaw was found in the Apache Commons Lang library. The ClassUtils.getClass(...) method can throw a StackOverflowError on very long inputs. Since this error is typically not handled by applications and libraries, a StackOverflowError may lead to the termination of an application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Streams for Apache Kafka 2.9.2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-48924"
        },
        {
          "category": "external",
          "summary": "RHBZ#2379554",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2379554"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-48924",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-48924"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-48924",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48924"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1",
          "url": "https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1"
        }
      ],
      "release_date": "2025-07-11T14:56:58.049000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-09-11T15:16:59+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Streams for Apache Kafka 2.9.2"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:15697"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Streams for Apache Kafka 2.9.2"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Streams for Apache Kafka 2.9.2"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang"
    },
    {
      "cve": "CVE-2025-55163",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-08-13T15:01:55.372237+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2388252"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the \"MadeYouReset\" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity. It is simple to exploit because it does not require authentication and could result in a denial of service (DoS). While some DoS flaws are classified as Moderate, \u201cMadeYouReset\u201d is Important because of the limited barriers (no specialized tooling or advanced scripting) to exploitation, which directly impacts service availability. The vulnerability arises from an implementation weakness in HTTP/2 stream reset handling \u2014 malformed client requests can trigger server-side resets without incrementing abuse counters, allowing an attacker to bypass built-in request throttling and overhead limits. Since these resets consume CPU and memory resources and can be generated at scale over a single TCP/TLS connection, a remote attacker could exhaust server capacity quickly, impacting all legitimate clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Streams for Apache Kafka 2.9.2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "RHBZ#2388252",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/767506",
          "url": "https://kb.cert.org/vuls/id/767506"
        }
      ],
      "release_date": "2025-08-13T14:17:36.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-09-11T15:16:59+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Streams for Apache Kafka 2.9.2"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:15697"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "Streams for Apache Kafka 2.9.2"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Streams for Apache Kafka 2.9.2"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Streams for Apache Kafka 3.0.1 is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Streams for Apache Kafka, based on the Apache Kafka project, offers a distributed\nbackbone that allows microservices and other applications to share data with\nextremely high throughput and extremely low latency.\n\nThis release of Red Hat Streams for Apache Kafka 3.0.1 serves as a replacement for Red Hat Streams for Apache Kafka 3.0.0, and includes security and bug fixes, and enhancements.\n\n* Cruise Control, Drain Cleaner: Netty: netty-codec-http2: Netty MadeYouReset\nHTTP/2 DDoS Vulnerability [amq-st-3.0] \"(CVE-2025-55163)\"\n* Kafka: org.apache.commons:commons-lang3 : Uncontrolled Recursion [amq-st-3.0] \"(CVE-2025-48924)\"",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:16407",
        "url": "https://access.redhat.com/errata/RHSA-2025:16407"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2379554",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2379554"
      },
      {
        "category": "external",
        "summary": "2388252",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16407.json"
      }
    ],
    "title": "Red Hat Security Advisory: Streams for Apache Kafka 3.0.1 release and security update",
    "tracking": {
      "current_release_date": "2026-08-04T13:43:03+00:00",
      "generator": {
        "date": "2026-08-04T13:43:03+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.8"
        }
      },
      "id": "RHSA-2025:16407",
      "initial_release_date": "2025-09-22T21:48:11+00:00",
      "revision_history": [
        {
          "date": "2025-09-22T21:48:11+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-09-22T21:48:11+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-04T13:43:03+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Streams for Apache Kafka 3.0.1",
                "product": {
                  "name": "Streams for Apache Kafka 3.0.1",
                  "product_id": "Streams for Apache Kafka 3.0.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:amq_streams:3.0::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-48924",
      "cwe": {
        "id": "CWE-674",
        "name": "Uncontrolled Recursion"
      },
      "discovery_date": "2025-07-11T15:01:08.754489+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2379554"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An uncontrolled recursion flaw was found in the Apache Commons Lang library. The ClassUtils.getClass(...) method can throw a StackOverflowError on very long inputs. Since this error is typically not handled by applications and libraries, a StackOverflowError may lead to the termination of an application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Streams for Apache Kafka 3.0.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-48924"
        },
        {
          "category": "external",
          "summary": "RHBZ#2379554",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2379554"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-48924",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-48924"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-48924",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48924"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1",
          "url": "https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1"
        }
      ],
      "release_date": "2025-07-11T14:56:58.049000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-09-22T21:48:11+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Streams for Apache Kafka 3.0.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:16407"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Streams for Apache Kafka 3.0.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Streams for Apache Kafka 3.0.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang"
    },
    {
      "cve": "CVE-2025-55163",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-08-13T15:01:55.372237+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2388252"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the \"MadeYouReset\" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity. It is simple to exploit because it does not require authentication and could result in a denial of service (DoS). While some DoS flaws are classified as Moderate, \u201cMadeYouReset\u201d is Important because of the limited barriers (no specialized tooling or advanced scripting) to exploitation, which directly impacts service availability. The vulnerability arises from an implementation weakness in HTTP/2 stream reset handling \u2014 malformed client requests can trigger server-side resets without incrementing abuse counters, allowing an attacker to bypass built-in request throttling and overhead limits. Since these resets consume CPU and memory resources and can be generated at scale over a single TCP/TLS connection, a remote attacker could exhaust server capacity quickly, impacting all legitimate clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Streams for Apache Kafka 3.0.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "RHBZ#2388252",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/767506",
          "url": "https://kb.cert.org/vuls/id/767506"
        }
      ],
      "release_date": "2025-08-13T14:17:36.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-09-22T21:48:11+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Streams for Apache Kafka 3.0.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:16407"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "Streams for Apache Kafka 3.0.1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Streams for Apache Kafka 3.0.1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime.\n\nThis asynchronous patch is an update for Red Hat JBoss Enterprise Application Platform 8.1. See Release Notes for information about the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions [eap-8.1.z] (CVE-2025-58056)\n\n* netty-codec-http2: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions [eap-8.1.z] (CVE-2025-58056)\n\n* cxf: CXF JMS Code Execution Vulnerability [eap-8.1.z] (CVE-2025-48913)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:17298",
        "url": "https://access.redhat.com/errata/RHSA-2025:17298"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/articles/7129481",
        "url": "https://access.redhat.com/articles/7129481"
      },
      {
        "category": "external",
        "summary": "2388252",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
      },
      {
        "category": "external",
        "summary": "2392996",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392996"
      },
      {
        "category": "external",
        "summary": "JBEAP-30701",
        "url": "https://issues.redhat.com/browse/JBEAP-30701"
      },
      {
        "category": "external",
        "summary": "JBEAP-30732",
        "url": "https://issues.redhat.com/browse/JBEAP-30732"
      },
      {
        "category": "external",
        "summary": "JBEAP-30759",
        "url": "https://issues.redhat.com/browse/JBEAP-30759"
      },
      {
        "category": "external",
        "summary": "JBEAP-30761",
        "url": "https://issues.redhat.com/browse/JBEAP-30761"
      },
      {
        "category": "external",
        "summary": "JBEAP-30763",
        "url": "https://issues.redhat.com/browse/JBEAP-30763"
      },
      {
        "category": "external",
        "summary": "JBEAP-30887",
        "url": "https://issues.redhat.com/browse/JBEAP-30887"
      },
      {
        "category": "external",
        "summary": "JBEAP-30889",
        "url": "https://issues.redhat.com/browse/JBEAP-30889"
      },
      {
        "category": "external",
        "summary": "JBEAP-30891",
        "url": "https://issues.redhat.com/browse/JBEAP-30891"
      },
      {
        "category": "external",
        "summary": "JBEAP-30916",
        "url": "https://issues.redhat.com/browse/JBEAP-30916"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17298.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.0 security update",
    "tracking": {
      "current_release_date": "2026-07-27T15:08:26+00:00",
      "generator": {
        "date": "2026-07-27T15:08:26+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2025:17298",
      "initial_release_date": "2025-10-02T14:58:17+00:00",
      "revision_history": [
        {
          "date": "2025-10-02T14:58:17+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-10-02T14:58:17+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-27T15:08:26+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss EAP 8.1 for RHEL 9",
                "product": {
                  "name": "Red Hat JBoss EAP 8.1 for RHEL 9",
                  "product_id": "9Base-JBEAP-8.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat JBoss EAP 8.1 for RHEL 8",
                "product": {
                  "name": "Red Hat JBoss EAP 8.1 for RHEL 8",
                  "product_id": "8Base-JBEAP-8.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Enterprise Application Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src",
                  "product_id": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-xml-security@3.0.5-1.redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
                "product": {
                  "name": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
                  "product_id": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-cxf@4.0.9-4.redhat_00002.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
                "product": {
                  "name": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
                  "product_id": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml@4.3.2-2.redhat_00002.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
                "product": {
                  "name": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
                  "product_id": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j@3.0.4-1.redhat_00002.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
                  "product_id": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll@4.1.127-1.Final_redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
                  "product_id": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty@4.1.127-1.Final_redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
                "product": {
                  "name": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
                  "product_id": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-eap-product-conf-parent@801.0.1-2.GA_redhat_00003.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
                "product": {
                  "name": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
                  "product_id": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly@8.1.0-55.GA_redhat_00016.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
                "product": {
                  "name": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
                  "product_id": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jbossws-cxf@7.3.4-1.Final_redhat_00001.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
                "product": {
                  "name": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
                  "product_id": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-commons-lang@3.18.0-1.redhat_00002.1.el9eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
                  "product_id": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-xml-security@3.0.5-1.redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
                "product": {
                  "name": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
                  "product_id": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-cxf@4.0.9-4.redhat_00002.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
                "product": {
                  "name": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
                  "product_id": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml@4.3.2-2.redhat_00002.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
                "product": {
                  "name": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
                  "product_id": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-eap-product-conf-parent@801.0.1-2.GA_redhat_00003.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
                  "product_id": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll@4.1.127-1.Final_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
                "product": {
                  "name": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
                  "product_id": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j@3.0.4-1.redhat_00002.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
                  "product_id": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty@4.1.127-1.Final_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
                "product": {
                  "name": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
                  "product_id": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly@8.1.0-55.GA_redhat_00016.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
                "product": {
                  "name": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
                  "product_id": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jbossws-cxf@7.3.4-1.Final_redhat_00001.1.el8eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
                "product": {
                  "name": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
                  "product_id": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-commons-lang@3.18.0-1.redhat_00002.1.el8eap?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-xml-security@3.0.5-1.redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-cxf@4.0.9-4.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-cxf-rt@4.0.9-4.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-cxf-services@4.0.9-4.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-cxf-tools@4.0.9-4.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml@4.3.2-2.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-core@4.3.2-2.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-profile-api@4.3.2-2.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-saml-api@4.3.2-2.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-saml-impl@4.3.2-2.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-security-api@4.3.2-2.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-security-impl@4.3.2-2.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-soap-api@4.3.2-2.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-xacml-api@4.3.2-2.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-xacml-impl@4.3.2-2.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-xacml-saml-api@4.3.2-2.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-xacml-saml-impl@4.3.2-2.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-xmlsec-api@4.3.2-2.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-xmlsec-impl@4.3.2-2.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j@3.0.4-1.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j-bindings@3.0.4-1.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j-policy@3.0.4-1.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j-ws-security-common@3.0.4-1.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j-ws-security-dom@3.0.4-1.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j-ws-security-policy-stax@3.0.4-1.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j-ws-security-stax@3.0.4-1.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty@4.1.127-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-buffer@4.1.127-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-codec@4.1.127-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-codec-dns@4.1.127-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-codec-http@4.1.127-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-codec-socks@4.1.127-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-common@4.1.127-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-handler@4.1.127-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-handler-proxy@4.1.127-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-resolver@4.1.127-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-resolver-dns@4.1.127-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport@4.1.127-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport-classes-epoll@4.1.127-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport-native-unix-common@4.1.127-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
                "product": {
                  "name": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
                  "product_id": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-eap-product-conf-parent@801.0.1-2.GA_redhat_00003.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
                "product": {
                  "name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
                  "product_id": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-eap-product-conf-wildfly-ee-feature-pack@801.0.1-2.GA_redhat_00003.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly@8.1.0-55.GA_redhat_00016.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk17@8.1.0-55.GA_redhat_00016.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk21@8.1.0-55.GA_redhat_00016.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
                "product": {
                  "name": "eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
                  "product_id": "eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-modules@8.1.0-55.GA_redhat_00016.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
                "product": {
                  "name": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_id": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jbossws-cxf@7.3.4-1.Final_redhat_00001.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
                "product": {
                  "name": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
                  "product_id": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-commons-lang@3.18.0-1.redhat_00002.1.el9eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-xml-security@3.0.5-1.redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-cxf@4.0.9-4.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-cxf-rt@4.0.9-4.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-cxf-services@4.0.9-4.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-cxf-tools@4.0.9-4.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml@4.3.2-2.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-core@4.3.2-2.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-profile-api@4.3.2-2.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-saml-api@4.3.2-2.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-saml-impl@4.3.2-2.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-security-api@4.3.2-2.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-security-impl@4.3.2-2.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-soap-api@4.3.2-2.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-xacml-api@4.3.2-2.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-xacml-impl@4.3.2-2.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-xacml-saml-api@4.3.2-2.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-xacml-saml-impl@4.3.2-2.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-xmlsec-api@4.3.2-2.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-opensaml-xmlsec-impl@4.3.2-2.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
                "product": {
                  "name": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
                  "product_id": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-eap-product-conf-parent@801.0.1-2.GA_redhat_00003.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
                "product": {
                  "name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
                  "product_id": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-eap-product-conf-wildfly-ee-feature-pack@801.0.1-2.GA_redhat_00003.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j@3.0.4-1.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j-bindings@3.0.4-1.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j-policy@3.0.4-1.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j-ws-security-common@3.0.4-1.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j-ws-security-dom@3.0.4-1.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j-ws-security-policy-stax@3.0.4-1.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wss4j-ws-security-stax@3.0.4-1.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty@4.1.127-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-buffer@4.1.127-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-codec@4.1.127-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-codec-dns@4.1.127-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-codec-http@4.1.127-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-codec-socks@4.1.127-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-common@4.1.127-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-handler@4.1.127-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-handler-proxy@4.1.127-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-resolver@4.1.127-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-resolver-dns@4.1.127-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport@4.1.127-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport-classes-epoll@4.1.127-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport-native-unix-common@4.1.127-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
                "product": {
                  "name": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
                  "product_id": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly@8.1.0-55.GA_redhat_00016.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
                "product": {
                  "name": "eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
                  "product_id": "eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk17@8.1.0-55.GA_redhat_00016.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
                "product": {
                  "name": "eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
                  "product_id": "eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-java-jdk21@8.1.0-55.GA_redhat_00016.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
                "product": {
                  "name": "eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
                  "product_id": "eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-wildfly-modules@8.1.0-55.GA_redhat_00016.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
                "product": {
                  "name": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_id": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-jbossws-cxf@7.3.4-1.Final_redhat_00001.1.el8eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
                "product": {
                  "name": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
                  "product_id": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-apache-commons-lang@3.18.0-1.redhat_00002.1.el8eap?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
                "product": {
                  "name": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
                  "product_id": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll@4.1.127-1.Final_redhat_00001.1.el9eap?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
                "product": {
                  "name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
                  "product_id": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll-debuginfo@4.1.127-1.Final_redhat_00001.1.el9eap?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
                "product": {
                  "name": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
                  "product_id": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll@4.1.127-1.Final_redhat_00001.1.el8eap?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
                "product": {
                  "name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
                  "product_id": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap8-netty-transport-native-epoll-debuginfo@4.1.127-1.Final_redhat_00001.1.el8eap?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src"
        },
        "product_reference": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src"
        },
        "product_reference": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch"
        },
        "product_reference": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src"
        },
        "product_reference": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch"
        },
        "product_reference": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64 as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64"
        },
        "product_reference": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64 as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64"
        },
        "product_reference": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src"
        },
        "product_reference": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch"
        },
        "product_reference": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src"
        },
        "product_reference": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch"
        },
        "product_reference": "eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch"
        },
        "product_reference": "eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch"
        },
        "product_reference": "eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src"
        },
        "product_reference": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch"
        },
        "product_reference": "eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch"
        },
        "product_reference": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 8",
          "product_id": "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src"
        },
        "product_reference": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
        "relates_to_product_reference": "8Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src"
        },
        "product_reference": "eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src"
        },
        "product_reference": "eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch"
        },
        "product_reference": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src"
        },
        "product_reference": "eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch"
        },
        "product_reference": "eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64 as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64"
        },
        "product_reference": "eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64 as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64"
        },
        "product_reference": "eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src"
        },
        "product_reference": "eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src"
        },
        "product_reference": "eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch"
        },
        "product_reference": "eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src"
        },
        "product_reference": "eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch"
        },
        "product_reference": "eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch"
        },
        "product_reference": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src as a component of Red Hat JBoss EAP 8.1 for RHEL 9",
          "product_id": "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src"
        },
        "product_reference": "eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src",
        "relates_to_product_reference": "9Base-JBEAP-8.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-48913",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2025-08-08T10:00:54.007824+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2387221"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in org.apache.cxf/cxf, where untrusted users can configure JMS to allow the specification of RMI or LDAP URLs, possibly leading to code execution. This vulnerability allows an attacker to provide malicious protocol URLs during JMS configuration.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw should be considered Important because the impact goes beyond a simple denial of service or configuration misuse. By allowing untrusted users to configure JMS with RMI or LDAP URLs, attackers could achieve remote code execution by loading attacker-controlled classes or objects. Although this requires the precondition that the attacker has access to JMS configuration, in many enterprise deployments this may be exposed through integration layers or misconfigured permissions, making the attack surface broader than a purely local or limited-scope scenario.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
          "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-48913"
        },
        {
          "category": "external",
          "summary": "RHBZ#2387221",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2387221"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-48913",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-48913"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-48913",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48913"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/f1nv488ztc0js4g5ml2v88mzkzslyh83",
          "url": "https://lists.apache.org/thread/f1nv488ztc0js4g5ml2v88mzkzslyh83"
        }
      ],
      "release_date": "2025-08-08T09:21:22.208000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-02T14:58:17+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17298"
        },
        {
          "category": "workaround",
          "details": "To reduce risk, deployments should restrict the allowed protocols in JMS configuration to trusted and expected values only. In particular, disallow the use of rmi:// and ldap:// URLs, which could be abused for remote class loading and code execution.",
          "product_ids": [
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability"
    },
    {
      "cve": "CVE-2025-55163",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2025-08-13T15:01:55.372237+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2388252"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the \"MadeYouReset\" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated with an Important severity. It is simple to exploit because it does not require authentication and could result in a denial of service (DoS). While some DoS flaws are classified as Moderate, \u201cMadeYouReset\u201d is Important because of the limited barriers (no specialized tooling or advanced scripting) to exploitation, which directly impacts service availability. The vulnerability arises from an implementation weakness in HTTP/2 stream reset handling \u2014 malformed client requests can trigger server-side resets without incrementing abuse counters, allowing an attacker to bypass built-in request throttling and overhead limits. Since these resets consume CPU and memory resources and can be generated at scale over a single TCP/TLS connection, a remote attacker could exhaust server capacity quickly, impacting all legitimate clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
          "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "RHBZ#2388252",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388252"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55163",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55163"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/767506",
          "url": "https://kb.cert.org/vuls/id/767506"
        }
      ],
      "release_date": "2025-08-13T14:17:36.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-02T14:58:17+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17298"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability"
    },
    {
      "cve": "CVE-2025-58056",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2025-09-03T21:01:22.935850+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2392996"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw in Netty\u2019s HTTP/1.1 chunked encoding parser allows newline (LF) characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same input differently, potentially enabling HTTP request smuggling attacks such as bypassing access controls or corrupting responses.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is considered Moderate rather than Important because successful exploitation depends on a very specific deployment condition: the presence of an intermediary reverse proxy that both mishandles lone LF characters in chunk extensions and forwards them unmodified to Netty. By itself, Netty\u2019s parsing quirk does not introduce risk, and in most real-world environments, reverse proxies normalize or reject malformed chunked requests, preventing smuggling. As a result, the vulnerability has limited reach, requires a niche configuration to be exploitable, and does not universally expose Netty-based servers to request smuggling\u2014hence it is rated moderate in severity rather than important or critical.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
          "8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
          "8Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
          "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
          "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
          "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
          "9Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
          "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-58056"
        },
        {
          "category": "external",
          "summary": "RHBZ#2392996",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392996"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-58056",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-58056"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58056",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58056"
        },
        {
          "category": "external",
          "summary": "https://datatracker.ietf.org/doc/html/rfc9112#name-chunked-transfer-coding",
          "url": "https://datatracker.ietf.org/doc/html/rfc9112#name-chunked-transfer-coding"
        },
        {
          "category": "external",
          "summary": "https://github.com/JLLeitschuh/unCVEed/issues/1",
          "url": "https://github.com/JLLeitschuh/unCVEed/issues/1"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/commit/edb55fd8e0a3bcbd85881e423464f585183d1284",
          "url": "https://github.com/netty/netty/commit/edb55fd8e0a3bcbd85881e423464f585183d1284"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/issues/15522",
          "url": "https://github.com/netty/netty/issues/15522"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/pull/15611",
          "url": "https://github.com/netty/netty/pull/15611"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-fghv-69vj-qj49",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-fghv-69vj-qj49"
        },
        {
          "category": "external",
          "summary": "https://w4ke.info/2025/06/18/funky-chunks.html",
          "url": "https://w4ke.info/2025/06/18/funky-chunks.html"
        }
      ],
      "release_date": "2025-09-03T20:56:50.732000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-02T14:58:17+00:00",
          "details": "Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:17298"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, enforce strict RFC compliance on all front-end proxies and load balancers so that lone LF characters in chunk extensions are rejected or normalized before being forwarded. Additionally, configure input validation at the application or proxy layer to block malformed chunked requests, ensuring consistent parsing across all components in the request path.",
          "product_ids": [
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el8eap.x86_64",
            "8Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el8eap.src",
            "8Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.noarch",
            "8Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el8eap.src",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-commons-lang-0:3.18.0-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-0:4.0.9-4.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-apache-cxf-rt-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-services-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-apache-cxf-tools-0:4.0.9-4.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-parent-0:801.0.1-2.GA_redhat_00003.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-eap-product-conf-wildfly-ee-feature-pack-0:801.0.1-2.GA_redhat_00003.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-jbossws-cxf-0:7.3.4-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-buffer-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-http-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-codec-socks-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-handler-proxy-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-resolver-dns-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-classes-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-epoll-debuginfo-0:4.1.127-1.Final_redhat_00001.1.el9eap.x86_64",
            "9Base-JBEAP-8.1:eap8-netty-transport-native-unix-common-0:4.1.127-1.Final_redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-0:4.3.2-2.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-opensaml-core-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-profile-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-security-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-soap-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xacml-saml-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-api-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-opensaml-xmlsec-impl-0:4.3.2-2.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-0:8.1.0-55.GA_redhat_00016.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk17-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-java-jdk21-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wildfly-modules-0:8.1.0-55.GA_redhat_00016.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-0:3.0.4-1.redhat_00002.1.el9eap.src",
            "9Base-JBEAP-8.1:eap8-wss4j-bindings-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-policy-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-common-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-dom-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-policy-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-wss4j-ws-security-stax-0:3.0.4-1.redhat_00002.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.noarch",
            "9Base-JBEAP-8.1:eap8-xml-security-0:3.0.5-1.redhat_00001.1.el9eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions"
    }
  ]
}