{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A Subscription Management tool for finding and reporting Red Hat product usage",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds,\nidentifies, and reports environment data, or facts, such as the number of physical and virtual\nsystems on a network, their operating systems, and relevant configuration data stored within\nthem. Discovery also identifies and reports more detailed facts for some versions of key\nRed Hat packages and products that it finds in the network.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:46836",
        "url": "https://access.redhat.com/errata/RHSA-2026:46836"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-5278",
        "url": "https://access.redhat.com/security/cve/CVE-2025-5278"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-6170",
        "url": "https://access.redhat.com/security/cve/CVE-2025-6170"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-11332",
        "url": "https://access.redhat.com/security/cve/CVE-2026-11332"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-15308",
        "url": "https://access.redhat.com/security/cve/CVE-2026-15308"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-42055",
        "url": "https://access.redhat.com/security/cve/CVE-2026-42055"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48864",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48864"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-5435",
        "url": "https://access.redhat.com/security/cve/CVE-2026-5435"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54369",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54369"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54370",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54370"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-5450",
        "url": "https://access.redhat.com/security/cve/CVE-2026-5450"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-58016",
        "url": "https://access.redhat.com/security/cve/CVE-2026-58016"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-5928",
        "url": "https://access.redhat.com/security/cve/CVE-2026-5928"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-6238",
        "url": "https://access.redhat.com/security/cve/CVE-2026-6238"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery",
        "url": "https://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46836.json"
      }
    ],
    "title": "Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage",
    "tracking": {
      "current_release_date": "2026-07-27T17:00:32+00:00",
      "generator": {
        "date": "2026-07-27T17:00:32+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2026:46836",
      "initial_release_date": "2026-07-27T16:07:57+00:00",
      "revision_history": [
        {
          "date": "2026-07-27T16:07:57+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-27T16:08:06+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-27T17:00:32+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Discovery 2",
                "product": {
                  "name": "Red Hat Discovery 2",
                  "product_id": "Red Hat Discovery 2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:discovery:2::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Discovery"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
                "product": {
                  "name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
                  "product_id": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/discovery-server-rhel9@sha256%3Afa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6?arch=amd64\u0026repository_url=registry.redhat.io/discovery/discovery-server-rhel9\u0026tag=1784821670"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64",
                "product": {
                  "name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64",
                  "product_id": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/discovery-ui-rhel9@sha256%3A25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691?arch=amd64\u0026repository_url=registry.redhat.io/discovery/discovery-ui-rhel9\u0026tag=1784821750"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
                "product": {
                  "name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
                  "product_id": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/discovery-server-rhel9@sha256%3A0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47?arch=arm64\u0026repository_url=registry.redhat.io/discovery/discovery-server-rhel9\u0026tag=1784821670"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
                "product": {
                  "name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
                  "product_id": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/discovery-ui-rhel9@sha256%3A1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752?arch=arm64\u0026repository_url=registry.redhat.io/discovery/discovery-ui-rhel9\u0026tag=1784821750"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64 as a component of Red Hat Discovery 2",
          "product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64"
        },
        "product_reference": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
        "relates_to_product_reference": "Red Hat Discovery 2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64 as a component of Red Hat Discovery 2",
          "product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64"
        },
        "product_reference": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
        "relates_to_product_reference": "Red Hat Discovery 2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64 as a component of Red Hat Discovery 2",
          "product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64"
        },
        "product_reference": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
        "relates_to_product_reference": "Red Hat Discovery 2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64 as a component of Red Hat Discovery 2",
          "product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
        },
        "product_reference": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64",
        "relates_to_product_reference": "Red Hat Discovery 2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Mohamed Maatallah"
          ]
        }
      ],
      "cve": "CVE-2025-5278",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "discovery_date": "2025-05-27T13:50:20.148000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2368764"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GNU Coreutils. The sort utility\u0027s begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The severity of this issue is considered Moderate rather than Critical because successful exploitation requires the use of the traditional key specification syntax with an exceptionally large character position value, which is uncommon in typical usage. Although the vulnerability can lead to a heap buffer overflow resulting in a read one byte before the allocated buffer, it does not enable code execution, privilege escalation, or direct compromise of data confidentiality or integrity. The impact is therefore primarily limited to potential service disruption due to application crashes.\n\nFurthermore, default RHEL configurations such as SELinux enforcement, ASLR, and memory protections reduce the likelihood of exploitation and limit the scope of any resulting impact. These safeguards, along with typical system usage patterns that do not commonly invoke the vulnerable code path, restrict exploitability in default and hardened environments. Consequently, the vulnerability\u2019s overall security impact is mitigated compared to flaws that allow immediate code execution or broader compromise across system components.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64"
        ],
        "known_not_affected": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-5278"
        },
        {
          "category": "external",
          "summary": "RHBZ#2368764",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2368764"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-5278",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-5278"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5278",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5278"
        },
        {
          "category": "external",
          "summary": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633",
          "url": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633"
        },
        {
          "category": "external",
          "summary": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507",
          "url": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507"
        }
      ],
      "release_date": "2025-05-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-27T16:07:57+00:00",
          "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:46836"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Ahmed Lekssays"
          ]
        }
      ],
      "cve": "CVE-2025-6170",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "discovery_date": "2025-06-16T05:33:22.955000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2372952"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has rated the severity of this vulnerability as Low, since it affects only the interactive shell mode of the xmllint tool and requires a user to manually run the tool and enter or receive specially crafted input. The exploitation requires local access and a highly specific usage scenario that is uncommon in typical environments. While it can cause a crash, the impact is limited to availability, and exploitation is unlikely in real-world deployments.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-6170"
        },
        {
          "category": "external",
          "summary": "RHBZ#2372952",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2372952"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-6170",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-6170"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-6170",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6170"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/941",
          "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/941"
        }
      ],
      "release_date": "2025-06-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-27T16:07:57+00:00",
          "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:46836"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to a widespread installation base, or stability. It is strongly recommended to apply the upstream patch once available.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling"
    },
    {
      "cve": "CVE-2026-5435",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-04-28T14:01:44.684432+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463465"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "glibc: glibc: Out-of-bounds write via TSIG record processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-5435"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463465",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463465"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-5435",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-5435"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5435",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5435"
        },
        {
          "category": "external",
          "summary": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u",
          "url": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u"
        },
        {
          "category": "external",
          "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34033",
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34033"
        }
      ],
      "release_date": "2026-04-28T11:58:54.962000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-27T16:07:57+00:00",
          "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:46836"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "glibc: glibc: Out-of-bounds write via TSIG record processing"
    },
    {
      "cve": "CVE-2026-5450",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-04-20T21:01:35.403778+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2459853"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Because this flaw requires that an affected application call the affected functions with an attacker-supplied value, Red Hat assesses the Attack Complexity of this flaw as High. Additionally, the flaw overflows a single byte onto the heap, so meaningful exploitation requires that the heap is structured such that a single byte can lead to an attacker-controlled outcome, or that the affected functions can be invoked with an attacker-controlled buffer base address. Regarding Attack Vector and Privileges Required, Red Hat assesses these elements as Local and Low respectively, as remote unauthenticated exploitation would require all the conditions above in a library client that listened on a network port and processed attacker-controllable data with the affected library functions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-5450"
        },
        {
          "category": "external",
          "summary": "RHBZ#2459853",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459853"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-5450",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-5450"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450"
        },
        {
          "category": "external",
          "summary": "https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u",
          "url": "https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997"
        },
        {
          "category": "external",
          "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450",
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450"
        }
      ],
      "release_date": "2026-04-20T20:55:41.170000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-27T16:07:57+00:00",
          "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:46836"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width"
    },
    {
      "cve": "CVE-2026-5928",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-04-20T21:01:38.811304+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2459854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-5928"
        },
        {
          "category": "external",
          "summary": "RHBZ#2459854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-5928",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-5928"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5928",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5928"
        },
        {
          "category": "external",
          "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=33998",
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33998"
        }
      ],
      "release_date": "2026-04-20T20:37:31.743000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-27T16:07:57+00:00",
          "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:46836"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings"
    },
    {
      "cve": "CVE-2026-6238",
      "cwe": {
        "id": "CWE-1284",
        "name": "Improper Validation of Specified Quantity in Input"
      },
      "discovery_date": "2026-04-28T19:09:30.721026+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463539"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in glibc (GNU C Library). The deprecated functions ns_printrrf, ns_printrr, and fp_nquery do not properly validate the length of RDATA (Resource Record Data) in a DNS (Domain Name System) response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could craft a malicious DNS response, leading to a target application crashing or reading uninitialized memory. These functions are intended for application debugging and are not part of the standard DNS resolver path.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "glibc: glibc: Application crash or uninitialized memory read via crafted DNS response",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64"
        ],
        "known_not_affected": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-6238"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463539",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463539"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6238",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-6238"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6238",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6238"
        },
        {
          "category": "external",
          "summary": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u",
          "url": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u"
        },
        {
          "category": "external",
          "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34069",
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34069"
        }
      ],
      "release_date": "2026-04-28T16:43:08.526000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-27T16:07:57+00:00",
          "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:46836"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "glibc: glibc: Application crash or uninitialized memory read via crafted DNS response"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Tommaso Bona"
          ]
        }
      ],
      "cve": "CVE-2026-11332",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2026-04-14T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2485379"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role\u0027s meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Conditions for Exploitation: Successful exploitation requires user interaction, specifically tricking a victim into installing a maliciously crafted Ansible role (or a role with a malicious dependency) using the ansible-galaxy role install command.\n\nBroad Impact: While user interaction is required, the potential impact is highly severe. Successfully injecting the malicious arguments allows a remote attacker to achieve arbitrary code execution on the machine running the Ansible command, leading to a full compromise of the user\u0027s environment and system integrity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64"
        ],
        "known_not_affected": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-11332"
        },
        {
          "category": "external",
          "summary": "RHBZ#2485379",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485379"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-11332",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-11332"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332"
        },
        {
          "category": "external",
          "summary": "https://github.com/ansible/ansible",
          "url": "https://github.com/ansible/ansible"
        }
      ],
      "release_date": "2026-06-05T07:12:55.739000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-27T16:07:57+00:00",
          "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:46836"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution"
    },
    {
      "cve": "CVE-2026-15308",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-07-09T18:02:10.090070+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498608"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit (CPU) resources. This leads to a denial of service, making the affected system unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in Python\u0027s `html.parser.HTMLParser` can lead to a denial of service. By supplying specially crafted, malformed HTML with repeated unterminated markup declarations, an attacker can cause excessive CPU consumption, rendering the system unresponsive. Red Hat products utilizing this parser to process untrusted HTML content are susceptible to resource exhaustion.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-15308"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498608",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498608"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-15308",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-15308"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15308",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15308"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9",
          "url": "https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced",
          "url": "https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606",
          "url": "https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd",
          "url": "https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/issues/153030",
          "url": "https://github.com/python/cpython/issues/153030"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/pull/153031",
          "url": "https://github.com/python/cpython/pull/153031"
        },
        {
          "category": "external",
          "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/",
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/"
        }
      ],
      "release_date": "2026-07-09T17:10:57.317000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-27T16:07:57+00:00",
          "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:46836"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations"
    },
    {
      "cve": "CVE-2026-42055",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-06-17T16:01:41.848723+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2489866"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in NGINX. When NGINX is configured to proxy HTTP/2 traffic using the ngx_http_proxy_v2_module or ngx_http_grpc_module with specific settings, a remote, unauthenticated attacker can send specially crafted large headers. This can trigger a heap-based buffer overflow, leading to a restart of the NGINX worker process and a Denial of Service (DoS). Under certain conditions, such as when Address Space Layout Randomization (ASLR) is disabled or bypassed, this vulnerability could also allow for arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is classified as Important severity primarily because:\nConditions for Exploitation: A remote, unauthenticated attacker can only exploit this if NGINX is explicitly configured to proxy HTTP/2 traffic using the ngx_http_proxy_v2_module or ngx_http_grpc_module.\n\nImpact Limitations: While the flaw reliably causes a Denial of Service (worker restart), achieving arbitrary code execution is highly complex in modern environments as it requires the attacker to bypass or disable Address Space Layout Randomization (ASLR)",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
        ],
        "known_not_affected": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42055"
        },
        {
          "category": "external",
          "summary": "RHBZ#2489866",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489866"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42055",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42055"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42055",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42055"
        },
        {
          "category": "external",
          "summary": "https://my.f5.com/manage/s/article/K000161584",
          "url": "https://my.f5.com/manage/s/article/K000161584"
        }
      ],
      "release_date": "2026-06-17T14:04:32.520000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-27T16:07:57+00:00",
          "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:46836"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, ensure that the `ignore_invalid_headers` directive is set to `on` in your NGINX configuration, or reduce the size specified by the `large_client_header_buffers` directive to 2 megabytes or less. These changes require an NGINX service reload or restart to take effect. Reloading the NGINX service is generally safe, but a restart will briefly interrupt service.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers"
    },
    {
      "acknowledgments": [
        {
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2026-48864",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-04-21T23:19:41+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460425"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This heap buffer overflow in libsolv\u0027s page decompression logic can lead to out-of-bounds reads and writes when processing specially crafted `.solv` files. Exploitation requires a victim application to ingest malicious repository metadata, limiting the attack vector to scenarios involving user interaction or untrusted content sources. Given the user interaction needed, Red Hat Product Security has rated this vulnerability as having a impact of Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48864"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460425",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460425"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48864",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48864"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48864",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48864"
        }
      ],
      "release_date": "2026-05-26T16:07:55.363000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-27T16:07:57+00:00",
          "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:46836"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Andrew Tridgell \u003ctridge60@gmail.com\u003e",
            "Alexander Peslyak \u003csolar@openwall.com\u003e"
          ]
        }
      ],
      "cve": "CVE-2026-54369",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2026-06-16T23:47:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2490277"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `acl` package, specifically within its `libacl` pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list (ACL) read or write operations to arbitrary files or directories, leading to unauthorized manipulation of ACLs and ultimately local privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "acl: Symlink traversal privilege escalation via libacl functions",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54369"
        },
        {
          "category": "external",
          "summary": "RHBZ#2490277",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490277"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54369",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54369"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54369",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54369"
        }
      ],
      "release_date": "2026-06-29T13:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-27T16:07:57+00:00",
          "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:46836"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "acl: Symlink traversal privilege escalation via libacl functions"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Andrew Tridgell \u003ctridge60@gmail.com\u003e",
            "Alexander Peslyak \u003csolar@openwall.com\u003e"
          ]
        }
      ],
      "cve": "CVE-2026-54370",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-06-16T19:47:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2490279"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A time-of-check to time-of-use (TOCTOU) race condition vulnerability was found in `acl`. By replacing a pathname component with a symbolic link between a security check and subsequent file operations, an attacker can redirect file access control list operations. This occurs when privileged processes invoke `getfacl` or `setfacl` over an attacker-controlled path, potentially leading to local privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "acl: TOCTOU Symlink Traversal via getfacl/setfacl",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
        ],
        "known_not_affected": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54370"
        },
        {
          "category": "external",
          "summary": "RHBZ#2490279",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490279"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54370",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54370"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54370",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54370"
        }
      ],
      "release_date": "2026-06-29T13:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-27T16:07:57+00:00",
          "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:46836"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "acl: TOCTOU Symlink Traversal via getfacl/setfacl"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "linhlhq"
          ]
        }
      ],
      "cve": "CVE-2026-58016",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "discovery_date": "2026-06-24T17:29:08.344000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2492257"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a \u003cnode\u003e element nested within other elements like \u003cmethod\u003e, \u003csignal\u003e, \u003cproperty\u003e or \u003carg\u003e. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "glib: integer underflow in gio/gdbusintrospection.c via \"g_dbus_node_info_new_for_xml\"",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Any applications processing D-Bus introspection XML input from untrusted sources with g_dbus_node_info_new_for_xml() are vulnerable to this issue. In GLib itself, the gdbus command line tool is the primary vector for local exploitation. However, other applications using the vulnerable function may process untrusted input in a way that allows a remote attacker to trigger this flaw. This vulnerability can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service. As this vulnerability allows a remote attacker to cause a denial of service, it has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
          "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-58016"
        },
        {
          "category": "external",
          "summary": "RHBZ#2492257",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492257"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-58016",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-58016"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58016",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58016"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/glib/-/issues/3932",
          "url": "https://gitlab.gnome.org/GNOME/glib/-/issues/3932"
        }
      ],
      "release_date": "2026-04-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-27T16:07:57+00:00",
          "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:46836"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, implement input validation to sanitize untrusted D-Bus introspection XML, specifically rejecting malformed structures such as \u003cnode\u003e elements improperly nested within \u003cmethod\u003e, \u003csignal\u003e, \u003cproperty\u003e or \u003carg\u003e elements before calling g_dbus_node_info_new_for_xml(). Alternatively, restricting the application to only process XML input from trusted, authenticated sources will completely neutralize this issue.",
          "product_ids": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:0c4f21c943641c8b229a8f018be12cb4a833ab5acd02b3bebc427bfb47635f47_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:fa528360848fc7e33946c1e5d0617cad56963243ccc1c7fd7fa77075e744c8b6_amd64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:1bb1b35d3061357f4fa46c07e20adc988cff1b0f775bd2c2268b18ac98273752_arm64",
            "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:25da43b1b6808948e4283885706b46f533037fe3a16c6b8f77c0dce0a8dfb691_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "glib: integer underflow in gio/gdbusintrospection.c via \"g_dbus_node_info_new_for_xml\""
    }
  ]
}