GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

RHSA-2026:68334

Vulnerability from csaf_redhat - Published: 2026-09-16 18:05 - Updated: 2026-09-16 21:46
Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.4 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.1.4 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a standalone feature, providing greater flexibility for edge deployments. In addition to the standalone version, RHEM continues to be offered as a plugin for the following platforms: Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge devices. Red Hat Ansible Automation Platform (AAP): Integrates edge management with Ansible automation. This integration enables organizations to optimize the management and orchestration of their fleets of edge devices; whether its thousands of dispersed retail point-of-sale systems or industrial machinery on remote factory floors. Value for customers and partners: * This solution not only helps customers manage thousands of devices but helps scale operations. * To manage large-scale deployments, customers need to be able to integrate with their existing management systems, support remote configuration and over-the-air updates, and collect telemetry data for advanced analytics. * Red Hat Edge Manager offers a simple and security-focused lifecycle management, from onboarding to decommissioning of edge devices. This complete end-to-end solution empowers organizations to gain the most value from the fleets of devices that generate data, all from a centralized location. Security Fixes: * flightctl: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681) * flightctl: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136) * flightctl: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145) * flightctl: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810) * flightctl: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * flightctl: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820) * flightctl: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check (CVE-2026-39831) * flightctl: OpenTelemetry-Go: Denial of Service via oversized baggage headers (CVE-2026-41178) * flightctl: Moby container framework: Host file overwrite via race condition in docker cp mount setup (CVE-2026-42306) * flightctl: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499) * flightctl: Golang MIME: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504) * flightctl: Billy: Denial of Service via crafted input due to insufficient validation (CVE-2026-44740) * flightctl: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs (CVE-2026-46597) * flightctl: Arc: Information disclosure and Denial of Service via unauthenticated debug endpoints (CVE-2026-48050) * flightctl: golang.org/x/text: Denial of Service via invalid UTF-8 input (CVE-2026-56852) * flightctl: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) * flightctl: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * flightctl: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) * flightctl: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * flightctl: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * flightctl: PostCSS: Information disclosure via crafted sourceMappingURL (CVE-2026-69153) * flightctl: go-git: Arbitrary file read/write via symbolic link resolution (CVE-2026-71556) * flightctl: MongoDB Go Driver: Write redirection via unvalidated database name in Client.BulkWrite (CVE-2026-81521)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-25681

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Product Identifier Version Remediation
Unresolved product id: 10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src —
Vendor Fix fix
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x —
Vendor Fix fix
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x —
Vendor Fix fix
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x —
Vendor Fix fix
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64 —
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le —
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x —
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64 —
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch —
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64 —
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le —
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x —
Workaround
Unresolved product id: 10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64 —
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64 —
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le —
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x —
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64 —
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch —
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64 —
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le —
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x —
Workaround
Unresolved product id: 9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64 —
Workaround
Threats
Impact Important
CVE-2026-27136

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-27145

A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-33810

A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
CWE-1289 - Improper Validation of Unsafe Equivalence in Input
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-39820

A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-39831

A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-347 - Improper Verification of Cryptographic Signature
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-41178

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-42306

A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.

7.2 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H
CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-42499

A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1046 - Creation of Immutable Text Using String Concatenation
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-42504

A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-44740

A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-606 - Unchecked Input for Loop Condition
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-46597

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-681 - Incorrect Conversion between Numeric Types
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-48050

A flaw was found in Arc. This vulnerability allows a remote unauthenticated attacker to access Go debug pprof endpoints due to improper authentication bypass. Successful exploitation can lead to the disclosure of sensitive runtime state information and enable a CPU-burn Denial of Service (DoS) attack, impacting the availability and confidentiality of the system.

8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-56852

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-56853

A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-56860

A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1050 - Excessive Platform Resource Consumption within a Loop
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-69153

A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration (the 'from' parameter) is not set. This can cause the application to read and expose unintended source-map files, potentially revealing sensitive information about the application's source code.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Moderate
CVE-2026-71556

A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink, which, when cloned and its worktree operations are used, can lead to reading from or writing to arbitrary files outside the intended working directory. This could result in information disclosure or arbitrary file modification.

7.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L
CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
CVE-2026-81521

A flaw was found in the MongoDB Go Driver. The `Client.BulkWrite` operation does not properly validate database names, allowing a specially crafted name with reserved characters to redirect write operations. This vulnerability could enable an attacker to modify or corrupt data in unintended databases and collections.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-791 - Incomplete Filtering of Special Elements
Affected products
Fixed 18 products, the same list as for CVE-2026-25681
Known not affected 18 products, the same list as for CVE-2026-25681
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:68334 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=2456335 external
https://bugzilla.redhat.com/show_bug.cgi?id=2467809 external
https://bugzilla.redhat.com/show_bug.cgi?id=2467820 external
https://bugzilla.redhat.com/show_bug.cgi?id=2480675 external
https://bugzilla.redhat.com/show_bug.cgi?id=2480678 external
https://bugzilla.redhat.com/show_bug.cgi?id=2480757 external
https://bugzilla.redhat.com/show_bug.cgi?id=2480761 external
https://bugzilla.redhat.com/show_bug.cgi?id=2483894 external
https://bugzilla.redhat.com/show_bug.cgi?id=2484204 external
https://bugzilla.redhat.com/show_bug.cgi?id=2484207 external
https://bugzilla.redhat.com/show_bug.cgi?id=2484830 external
https://bugzilla.redhat.com/show_bug.cgi?id=2488484 external
https://bugzilla.redhat.com/show_bug.cgi?id=2504233 external
https://bugzilla.redhat.com/show_bug.cgi?id=2510719 external
https://bugzilla.redhat.com/show_bug.cgi?id=2512562 external
https://bugzilla.redhat.com/show_bug.cgi?id=2515815 external
https://bugzilla.redhat.com/show_bug.cgi?id=2515820 external
https://bugzilla.redhat.com/show_bug.cgi?id=2515827 external
https://bugzilla.redhat.com/show_bug.cgi?id=2515838 external
https://bugzilla.redhat.com/show_bug.cgi?id=2515839 external
https://bugzilla.redhat.com/show_bug.cgi?id=2515840 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-25681 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480761 external
https://www.cve.org/CVERecord?id=CVE-2026-25681 external
https://nvd.nist.gov/vuln/detail/CVE-2026-25681 external
https://go.dev/cl/781703 external
https://go.dev/issue/79574 external
https://groups.google.com/g/golang-announce/c/iI-… external
https://pkg.go.dev/vuln/GO-2026-5029 external
https://access.redhat.com/security/cve/CVE-2026-27136 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480757 external
https://www.cve.org/CVERecord?id=CVE-2026-27136 external
https://nvd.nist.gov/vuln/detail/CVE-2026-27136 external
https://go.dev/cl/781685 external
https://go.dev/issue/79575 external
https://pkg.go.dev/vuln/GO-2026-5030 external
https://access.redhat.com/security/cve/CVE-2026-27145 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484207 external
https://www.cve.org/CVERecord?id=CVE-2026-27145 external
https://nvd.nist.gov/vuln/detail/CVE-2026-27145 external
https://go.dev/cl/783621 external
https://go.dev/issue/79694 external
https://groups.google.com/g/golang-announce/c/tKs… external
https://pkg.go.dev/vuln/GO-2026-5037 external
https://access.redhat.com/security/cve/CVE-2026-33810 self
https://bugzilla.redhat.com/show_bug.cgi?id=2456335 external
https://www.cve.org/CVERecord?id=CVE-2026-33810 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33810 external
https://go.dev/cl/763763 external
https://go.dev/issue/78332 external
https://groups.google.com/g/golang-announce/c/0uY… external
https://pkg.go.dev/vuln/GO-2026-4866 external
https://access.redhat.com/security/cve/CVE-2026-33818 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815 external
https://www.cve.org/CVERecord?id=CVE-2026-33818 external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818 external
https://go.dev/cl/814980 external
https://go.dev/issue/80405 external
https://groups.google.com/g/golang-announce/c/94p… external
https://pkg.go.dev/vuln/GO-2026-5972 external
https://access.redhat.com/security/cve/CVE-2026-39820 self
https://bugzilla.redhat.com/show_bug.cgi?id=2467820 external
https://www.cve.org/CVERecord?id=CVE-2026-39820 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39820 external
https://go.dev/cl/759940 external
https://go.dev/issue/78566 external
https://groups.google.com/g/golang-announce/c/qcC… external
https://pkg.go.dev/vuln/GO-2026-4986 external
https://access.redhat.com/security/cve/CVE-2026-39831 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480675 external
https://www.cve.org/CVERecord?id=CVE-2026-39831 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39831 external
https://go.dev/cl/781662 external
https://go.dev/issue/79566 external
https://groups.google.com/g/golang-announce/c/a08… external
https://pkg.go.dev/vuln/GO-2026-5019 external
https://access.redhat.com/security/cve/CVE-2026-41178 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484830 external
https://www.cve.org/CVERecord?id=CVE-2026-41178 external
https://nvd.nist.gov/vuln/detail/CVE-2026-41178 external
https://github.com/open-telemetry/opentelemetry-g… external
https://github.com/open-telemetry/opentelemetry-g… external
https://access.redhat.com/security/cve/CVE-2026-42306 self
https://bugzilla.redhat.com/show_bug.cgi?id=2488484 external
https://www.cve.org/CVERecord?id=CVE-2026-42306 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42306 external
https://github.com/moby/moby/security/advisories/… external
https://access.redhat.com/security/cve/CVE-2026-42499 self
https://bugzilla.redhat.com/show_bug.cgi?id=2467809 external
https://www.cve.org/CVERecord?id=CVE-2026-42499 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42499 external
https://go.dev/cl/771520 external
https://go.dev/issue/78987 external
https://pkg.go.dev/vuln/GO-2026-4977 external
https://access.redhat.com/security/cve/CVE-2026-42504 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484204 external
https://www.cve.org/CVERecord?id=CVE-2026-42504 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42504 external
https://go.dev/cl/774481 external
https://go.dev/issue/79217 external
https://pkg.go.dev/vuln/GO-2026-5038 external
https://access.redhat.com/security/cve/CVE-2026-44740 self
https://bugzilla.redhat.com/show_bug.cgi?id=2483894 external
https://www.cve.org/CVERecord?id=CVE-2026-44740 external
https://nvd.nist.gov/vuln/detail/CVE-2026-44740 external
https://github.com/go-git/go-billy/releases/tag/v5.9.0 external
https://github.com/go-git/go-billy/releases/tag/v… external
https://github.com/go-git/go-billy/security/advis… external
https://access.redhat.com/security/cve/CVE-2026-46597 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480678 external
https://www.cve.org/CVERecord?id=CVE-2026-46597 external
https://nvd.nist.gov/vuln/detail/CVE-2026-46597 external
https://go.dev/cl/781620 external
https://go.dev/issue/79561 external
https://pkg.go.dev/vuln/GO-2026-5013 external
https://access.redhat.com/security/cve/CVE-2026-48050 self
https://www.cve.org/CVERecord?id=CVE-2026-48050 external
https://access.redhat.com/security/cve/CVE-2026-56852 self
https://bugzilla.redhat.com/show_bug.cgi?id=2504233 external
https://www.cve.org/CVERecord?id=CVE-2026-56852 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56852 external
https://go.dev/cl/794100 external
https://go.dev/issue/80142 external
https://pkg.go.dev/vuln/GO-2026-5970 external
https://access.redhat.com/security/cve/CVE-2026-56853 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515827 external
https://www.cve.org/CVERecord?id=CVE-2026-56853 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56853 external
https://go.dev/cl/795540 external
https://go.dev/issue/80205 external
https://pkg.go.dev/vuln/GO-2026-6089 external
https://access.redhat.com/security/cve/CVE-2026-56858 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838 external
https://www.cve.org/CVERecord?id=CVE-2026-56858 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858 external
https://go.dev/cl/807100 external
https://go.dev/issue/80435 external
https://pkg.go.dev/vuln/GO-2026-6091 external
https://access.redhat.com/security/cve/CVE-2026-56859 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840 external
https://www.cve.org/CVERecord?id=CVE-2026-56859 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859 external
https://go.dev/cl/803320 external
https://go.dev/issue/80481 external
https://pkg.go.dev/vuln/GO-2026-6088 external
https://access.redhat.com/security/cve/CVE-2026-56860 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515820 external
https://www.cve.org/CVERecord?id=CVE-2026-56860 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56860 external
https://go.dev/cl/803681 external
https://go.dev/issue/80494 external
https://pkg.go.dev/vuln/GO-2026-6218 external
https://access.redhat.com/security/cve/CVE-2026-56862 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839 external
https://www.cve.org/CVERecord?id=CVE-2026-56862 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862 external
https://go.dev/cl/804261 external
https://go.dev/issue/80528 external
https://pkg.go.dev/vuln/GO-2026-6090 external
https://access.redhat.com/security/cve/CVE-2026-69153 self
https://bugzilla.redhat.com/show_bug.cgi?id=2510719 external
https://www.cve.org/CVERecord?id=CVE-2026-69153 external
https://nvd.nist.gov/vuln/detail/CVE-2026-69153 external
https://github.com/postcss/postcss/commit/7beca13… external
https://github.com/postcss/postcss/releases/tag/8.5.19 external
https://github.com/postcss/postcss/security/advis… external
https://access.redhat.com/security/cve/CVE-2026-71556 self
https://bugzilla.redhat.com/show_bug.cgi?id=2512562 external
https://www.cve.org/CVERecord?id=CVE-2026-71556 external
https://nvd.nist.gov/vuln/detail/CVE-2026-71556 external
https://github.com/go-git/go-git/commit/008a78f2d… external
https://github.com/go-git/go-git/commit/661d1c7f1… external
https://github.com/go-git/go-git/releases/tag/v5.19.2 external
https://github.com/go-git/go-git/releases/tag/v6.… external
https://github.com/go-git/go-git/security/advisor… external
https://access.redhat.com/security/cve/CVE-2026-81521 self
https://bugzilla.redhat.com/show_bug.cgi?id=2525215 external
https://www.cve.org/CVERecord?id=CVE-2026-81521 external
https://nvd.nist.gov/vuln/detail/CVE-2026-81521 external
https://pkg.go.dev/go.mongodb.org/mongo-driver/v2… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Edge Manager Version 1.1.4 Security Update",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\nRed Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\nRed Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.\n\nSecurity Fixes: \n\n* flightctl: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)\n* flightctl: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)\n* flightctl: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n* flightctl: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)\n* flightctl: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)\n* flightctl: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)\n* flightctl: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check (CVE-2026-39831)\n* flightctl: OpenTelemetry-Go: Denial of Service via oversized baggage headers (CVE-2026-41178)\n* flightctl: Moby container framework: Host file overwrite via race condition in docker cp mount setup (CVE-2026-42306)\n* flightctl: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)\n* flightctl: Golang MIME: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504)\n* flightctl: Billy: Denial of Service via crafted input due to insufficient validation (CVE-2026-44740)\n* flightctl: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs (CVE-2026-46597)\n* flightctl: Arc: Information disclosure and Denial of Service via unauthenticated debug endpoints (CVE-2026-48050)\n* flightctl: golang.org/x/text: Denial of Service via invalid UTF-8 input (CVE-2026-56852)\n* flightctl: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)\n* flightctl: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)\n* flightctl: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)\n* flightctl: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)\n* flightctl: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)\n* flightctl: PostCSS: Information disclosure via crafted sourceMappingURL (CVE-2026-69153)\n* flightctl: go-git: Arbitrary file read/write via symbolic link resolution (CVE-2026-71556)\n* flightctl: MongoDB Go Driver: Write redirection via unvalidated database name in Client.BulkWrite (CVE-2026-81521)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:68334",
        "url": "https://access.redhat.com/errata/RHSA-2026:68334"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2456335",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
      },
      {
        "category": "external",
        "summary": "2467809",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
      },
      {
        "category": "external",
        "summary": "2467820",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
      },
      {
        "category": "external",
        "summary": "2480675",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
      },
      {
        "category": "external",
        "summary": "2480678",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
      },
      {
        "category": "external",
        "summary": "2480757",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
      },
      {
        "category": "external",
        "summary": "2480761",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
      },
      {
        "category": "external",
        "summary": "2483894",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
      },
      {
        "category": "external",
        "summary": "2484204",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
      },
      {
        "category": "external",
        "summary": "2484207",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
      },
      {
        "category": "external",
        "summary": "2484830",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
      },
      {
        "category": "external",
        "summary": "2488484",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488484"
      },
      {
        "category": "external",
        "summary": "2504233",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
      },
      {
        "category": "external",
        "summary": "2510719",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510719"
      },
      {
        "category": "external",
        "summary": "2512562",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512562"
      },
      {
        "category": "external",
        "summary": "2515815",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
      },
      {
        "category": "external",
        "summary": "2515820",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
      },
      {
        "category": "external",
        "summary": "2515827",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
      },
      {
        "category": "external",
        "summary": "2515838",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
      },
      {
        "category": "external",
        "summary": "2515839",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
      },
      {
        "category": "external",
        "summary": "2515840",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68334.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.4 Security Update",
    "tracking": {
      "current_release_date": "2026-09-16T21:46:05+00:00",
      "generator": {
        "date": "2026-09-16T21:46:05+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.21"
        }
      },
      "id": "RHSA-2026:68334",
      "initial_release_date": "2026-09-16T18:05:40+00:00",
      "revision_history": [
        {
          "date": "2026-09-16T18:05:40+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-16T18:05:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-16T21:46:05+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "RHEM 1.1 for RHEL 10",
                "product": {
                  "name": "RHEM 1.1 for RHEL 10",
                  "product_id": "10Base-RHEM-1.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:edge_manager:1.1::el10"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "RHEM 1.1 for RHEL 9",
                "product": {
                  "name": "RHEM 1.1 for RHEL 9",
                  "product_id": "9Base-RHEM-1.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:edge_manager:1.1::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Edge Manager"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "flightctl-0:1.1.4-1.el10em.src",
                "product": {
                  "name": "flightctl-0:1.1.4-1.el10em.src",
                  "product_id": "flightctl-0:1.1.4-1.el10em.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl@1.1.4-1.el10em?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-0:1.1.4-1.el9em.src",
                "product": {
                  "name": "flightctl-0:1.1.4-1.el9em.src",
                  "product_id": "flightctl-0:1.1.4-1.el9em.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl@1.1.4-1.el9em?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "flightctl-agent-0:1.1.4-1.el10em.x86_64",
                "product": {
                  "name": "flightctl-agent-0:1.1.4-1.el10em.x86_64",
                  "product_id": "flightctl-agent-0:1.1.4-1.el10em.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-agent@1.1.4-1.el10em?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-cli-0:1.1.4-1.el10em.x86_64",
                "product": {
                  "name": "flightctl-cli-0:1.1.4-1.el10em.x86_64",
                  "product_id": "flightctl-cli-0:1.1.4-1.el10em.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-cli@1.1.4-1.el10em?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-observability-0:1.1.4-1.el10em.x86_64",
                "product": {
                  "name": "flightctl-observability-0:1.1.4-1.el10em.x86_64",
                  "product_id": "flightctl-observability-0:1.1.4-1.el10em.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-observability@1.1.4-1.el10em?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-services-0:1.1.4-1.el10em.x86_64",
                "product": {
                  "name": "flightctl-services-0:1.1.4-1.el10em.x86_64",
                  "product_id": "flightctl-services-0:1.1.4-1.el10em.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-services@1.1.4-1.el10em?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-agent-0:1.1.4-1.el9em.x86_64",
                "product": {
                  "name": "flightctl-agent-0:1.1.4-1.el9em.x86_64",
                  "product_id": "flightctl-agent-0:1.1.4-1.el9em.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-agent@1.1.4-1.el9em?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-cli-0:1.1.4-1.el9em.x86_64",
                "product": {
                  "name": "flightctl-cli-0:1.1.4-1.el9em.x86_64",
                  "product_id": "flightctl-cli-0:1.1.4-1.el9em.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-cli@1.1.4-1.el9em?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-observability-0:1.1.4-1.el9em.x86_64",
                "product": {
                  "name": "flightctl-observability-0:1.1.4-1.el9em.x86_64",
                  "product_id": "flightctl-observability-0:1.1.4-1.el9em.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-observability@1.1.4-1.el9em?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-services-0:1.1.4-1.el9em.x86_64",
                "product": {
                  "name": "flightctl-services-0:1.1.4-1.el9em.x86_64",
                  "product_id": "flightctl-services-0:1.1.4-1.el9em.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-services@1.1.4-1.el9em?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "flightctl-agent-0:1.1.4-1.el10em.s390x",
                "product": {
                  "name": "flightctl-agent-0:1.1.4-1.el10em.s390x",
                  "product_id": "flightctl-agent-0:1.1.4-1.el10em.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-agent@1.1.4-1.el10em?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-cli-0:1.1.4-1.el10em.s390x",
                "product": {
                  "name": "flightctl-cli-0:1.1.4-1.el10em.s390x",
                  "product_id": "flightctl-cli-0:1.1.4-1.el10em.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-cli@1.1.4-1.el10em?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-observability-0:1.1.4-1.el10em.s390x",
                "product": {
                  "name": "flightctl-observability-0:1.1.4-1.el10em.s390x",
                  "product_id": "flightctl-observability-0:1.1.4-1.el10em.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-observability@1.1.4-1.el10em?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-services-0:1.1.4-1.el10em.s390x",
                "product": {
                  "name": "flightctl-services-0:1.1.4-1.el10em.s390x",
                  "product_id": "flightctl-services-0:1.1.4-1.el10em.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-services@1.1.4-1.el10em?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-agent-0:1.1.4-1.el9em.s390x",
                "product": {
                  "name": "flightctl-agent-0:1.1.4-1.el9em.s390x",
                  "product_id": "flightctl-agent-0:1.1.4-1.el9em.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-agent@1.1.4-1.el9em?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-cli-0:1.1.4-1.el9em.s390x",
                "product": {
                  "name": "flightctl-cli-0:1.1.4-1.el9em.s390x",
                  "product_id": "flightctl-cli-0:1.1.4-1.el9em.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-cli@1.1.4-1.el9em?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-observability-0:1.1.4-1.el9em.s390x",
                "product": {
                  "name": "flightctl-observability-0:1.1.4-1.el9em.s390x",
                  "product_id": "flightctl-observability-0:1.1.4-1.el9em.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-observability@1.1.4-1.el9em?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-services-0:1.1.4-1.el9em.s390x",
                "product": {
                  "name": "flightctl-services-0:1.1.4-1.el9em.s390x",
                  "product_id": "flightctl-services-0:1.1.4-1.el9em.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-services@1.1.4-1.el9em?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "flightctl-agent-0:1.1.4-1.el10em.ppc64le",
                "product": {
                  "name": "flightctl-agent-0:1.1.4-1.el10em.ppc64le",
                  "product_id": "flightctl-agent-0:1.1.4-1.el10em.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-agent@1.1.4-1.el10em?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-cli-0:1.1.4-1.el10em.ppc64le",
                "product": {
                  "name": "flightctl-cli-0:1.1.4-1.el10em.ppc64le",
                  "product_id": "flightctl-cli-0:1.1.4-1.el10em.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-cli@1.1.4-1.el10em?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-observability-0:1.1.4-1.el10em.ppc64le",
                "product": {
                  "name": "flightctl-observability-0:1.1.4-1.el10em.ppc64le",
                  "product_id": "flightctl-observability-0:1.1.4-1.el10em.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-observability@1.1.4-1.el10em?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-services-0:1.1.4-1.el10em.ppc64le",
                "product": {
                  "name": "flightctl-services-0:1.1.4-1.el10em.ppc64le",
                  "product_id": "flightctl-services-0:1.1.4-1.el10em.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-services@1.1.4-1.el10em?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-agent-0:1.1.4-1.el9em.ppc64le",
                "product": {
                  "name": "flightctl-agent-0:1.1.4-1.el9em.ppc64le",
                  "product_id": "flightctl-agent-0:1.1.4-1.el9em.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-agent@1.1.4-1.el9em?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-cli-0:1.1.4-1.el9em.ppc64le",
                "product": {
                  "name": "flightctl-cli-0:1.1.4-1.el9em.ppc64le",
                  "product_id": "flightctl-cli-0:1.1.4-1.el9em.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-cli@1.1.4-1.el9em?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-observability-0:1.1.4-1.el9em.ppc64le",
                "product": {
                  "name": "flightctl-observability-0:1.1.4-1.el9em.ppc64le",
                  "product_id": "flightctl-observability-0:1.1.4-1.el9em.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-observability@1.1.4-1.el9em?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-services-0:1.1.4-1.el9em.ppc64le",
                "product": {
                  "name": "flightctl-services-0:1.1.4-1.el9em.ppc64le",
                  "product_id": "flightctl-services-0:1.1.4-1.el9em.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-services@1.1.4-1.el9em?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "flightctl-agent-0:1.1.4-1.el10em.aarch64",
                "product": {
                  "name": "flightctl-agent-0:1.1.4-1.el10em.aarch64",
                  "product_id": "flightctl-agent-0:1.1.4-1.el10em.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-agent@1.1.4-1.el10em?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-cli-0:1.1.4-1.el10em.aarch64",
                "product": {
                  "name": "flightctl-cli-0:1.1.4-1.el10em.aarch64",
                  "product_id": "flightctl-cli-0:1.1.4-1.el10em.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-cli@1.1.4-1.el10em?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-observability-0:1.1.4-1.el10em.aarch64",
                "product": {
                  "name": "flightctl-observability-0:1.1.4-1.el10em.aarch64",
                  "product_id": "flightctl-observability-0:1.1.4-1.el10em.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-observability@1.1.4-1.el10em?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-services-0:1.1.4-1.el10em.aarch64",
                "product": {
                  "name": "flightctl-services-0:1.1.4-1.el10em.aarch64",
                  "product_id": "flightctl-services-0:1.1.4-1.el10em.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-services@1.1.4-1.el10em?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-agent-0:1.1.4-1.el9em.aarch64",
                "product": {
                  "name": "flightctl-agent-0:1.1.4-1.el9em.aarch64",
                  "product_id": "flightctl-agent-0:1.1.4-1.el9em.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-agent@1.1.4-1.el9em?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-cli-0:1.1.4-1.el9em.aarch64",
                "product": {
                  "name": "flightctl-cli-0:1.1.4-1.el9em.aarch64",
                  "product_id": "flightctl-cli-0:1.1.4-1.el9em.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-cli@1.1.4-1.el9em?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-observability-0:1.1.4-1.el9em.aarch64",
                "product": {
                  "name": "flightctl-observability-0:1.1.4-1.el9em.aarch64",
                  "product_id": "flightctl-observability-0:1.1.4-1.el9em.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-observability@1.1.4-1.el9em?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-services-0:1.1.4-1.el9em.aarch64",
                "product": {
                  "name": "flightctl-services-0:1.1.4-1.el9em.aarch64",
                  "product_id": "flightctl-services-0:1.1.4-1.el9em.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-services@1.1.4-1.el9em?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "flightctl-selinux-0:1.1.4-1.el10em.noarch",
                "product": {
                  "name": "flightctl-selinux-0:1.1.4-1.el10em.noarch",
                  "product_id": "flightctl-selinux-0:1.1.4-1.el10em.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-selinux@1.1.4-1.el10em?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flightctl-selinux-0:1.1.4-1.el9em.noarch",
                "product": {
                  "name": "flightctl-selinux-0:1.1.4-1.el9em.noarch",
                  "product_id": "flightctl-selinux-0:1.1.4-1.el9em.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flightctl-selinux@1.1.4-1.el9em?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-0:1.1.4-1.el10em.src as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src"
        },
        "product_reference": "flightctl-0:1.1.4-1.el10em.src",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-agent-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64"
        },
        "product_reference": "flightctl-agent-0:1.1.4-1.el10em.aarch64",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-agent-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le"
        },
        "product_reference": "flightctl-agent-0:1.1.4-1.el10em.ppc64le",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-agent-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x"
        },
        "product_reference": "flightctl-agent-0:1.1.4-1.el10em.s390x",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-agent-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64"
        },
        "product_reference": "flightctl-agent-0:1.1.4-1.el10em.x86_64",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-cli-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64"
        },
        "product_reference": "flightctl-cli-0:1.1.4-1.el10em.aarch64",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-cli-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le"
        },
        "product_reference": "flightctl-cli-0:1.1.4-1.el10em.ppc64le",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-cli-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x"
        },
        "product_reference": "flightctl-cli-0:1.1.4-1.el10em.s390x",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-cli-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64"
        },
        "product_reference": "flightctl-cli-0:1.1.4-1.el10em.x86_64",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-observability-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64"
        },
        "product_reference": "flightctl-observability-0:1.1.4-1.el10em.aarch64",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-observability-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le"
        },
        "product_reference": "flightctl-observability-0:1.1.4-1.el10em.ppc64le",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-observability-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x"
        },
        "product_reference": "flightctl-observability-0:1.1.4-1.el10em.s390x",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-observability-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64"
        },
        "product_reference": "flightctl-observability-0:1.1.4-1.el10em.x86_64",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-selinux-0:1.1.4-1.el10em.noarch as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch"
        },
        "product_reference": "flightctl-selinux-0:1.1.4-1.el10em.noarch",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-services-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64"
        },
        "product_reference": "flightctl-services-0:1.1.4-1.el10em.aarch64",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-services-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le"
        },
        "product_reference": "flightctl-services-0:1.1.4-1.el10em.ppc64le",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-services-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x"
        },
        "product_reference": "flightctl-services-0:1.1.4-1.el10em.s390x",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-services-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10",
          "product_id": "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64"
        },
        "product_reference": "flightctl-services-0:1.1.4-1.el10em.x86_64",
        "relates_to_product_reference": "10Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-0:1.1.4-1.el9em.src as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src"
        },
        "product_reference": "flightctl-0:1.1.4-1.el9em.src",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-agent-0:1.1.4-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64"
        },
        "product_reference": "flightctl-agent-0:1.1.4-1.el9em.aarch64",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-agent-0:1.1.4-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le"
        },
        "product_reference": "flightctl-agent-0:1.1.4-1.el9em.ppc64le",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-agent-0:1.1.4-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x"
        },
        "product_reference": "flightctl-agent-0:1.1.4-1.el9em.s390x",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-agent-0:1.1.4-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64"
        },
        "product_reference": "flightctl-agent-0:1.1.4-1.el9em.x86_64",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-cli-0:1.1.4-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64"
        },
        "product_reference": "flightctl-cli-0:1.1.4-1.el9em.aarch64",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-cli-0:1.1.4-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le"
        },
        "product_reference": "flightctl-cli-0:1.1.4-1.el9em.ppc64le",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-cli-0:1.1.4-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x"
        },
        "product_reference": "flightctl-cli-0:1.1.4-1.el9em.s390x",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-cli-0:1.1.4-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        },
        "product_reference": "flightctl-cli-0:1.1.4-1.el9em.x86_64",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-observability-0:1.1.4-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64"
        },
        "product_reference": "flightctl-observability-0:1.1.4-1.el9em.aarch64",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-observability-0:1.1.4-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le"
        },
        "product_reference": "flightctl-observability-0:1.1.4-1.el9em.ppc64le",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-observability-0:1.1.4-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x"
        },
        "product_reference": "flightctl-observability-0:1.1.4-1.el9em.s390x",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-observability-0:1.1.4-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64"
        },
        "product_reference": "flightctl-observability-0:1.1.4-1.el9em.x86_64",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-selinux-0:1.1.4-1.el9em.noarch as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch"
        },
        "product_reference": "flightctl-selinux-0:1.1.4-1.el9em.noarch",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-services-0:1.1.4-1.el9em.aarch64 as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64"
        },
        "product_reference": "flightctl-services-0:1.1.4-1.el9em.aarch64",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-services-0:1.1.4-1.el9em.ppc64le as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le"
        },
        "product_reference": "flightctl-services-0:1.1.4-1.el9em.ppc64le",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-services-0:1.1.4-1.el9em.s390x as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x"
        },
        "product_reference": "flightctl-services-0:1.1.4-1.el9em.s390x",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flightctl-services-0:1.1.4-1.el9em.x86_64 as a component of RHEM 1.1 for RHEL 9",
          "product_id": "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        },
        "product_reference": "flightctl-services-0:1.1.4-1.el9em.x86_64",
        "relates_to_product_reference": "9Base-RHEM-1.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-25681",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:01:08.177603+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781703",
          "url": "https://go.dev/cl/781703"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79574",
          "url": "https://go.dev/issue/79574"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5029",
          "url": "https://pkg.go.dev/vuln/GO-2026-5029"
        }
      ],
      "release_date": "2026-05-22T15:01:21.975000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        },
        {
          "category": "workaround",
          "details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
    },
    {
      "cve": "CVE-2026-27136",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-05-22T16:00:56.609820+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480757"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480757",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781685",
          "url": "https://go.dev/cl/781685"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79575",
          "url": "https://go.dev/issue/79575"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5030",
          "url": "https://pkg.go.dev/vuln/GO-2026-5030"
        }
      ],
      "release_date": "2026-05-22T15:01:22.111000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
    },
    {
      "cve": "CVE-2026-27145",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-02T23:01:08.992540+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484207"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484207",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/783621",
          "url": "https://go.dev/cl/783621"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79694",
          "url": "https://go.dev/issue/79694"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5037",
          "url": "https://pkg.go.dev/vuln/GO-2026-5037"
        }
      ],
      "release_date": "2026-06-02T22:01:36.954000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        },
        {
          "category": "workaround",
          "details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
    },
    {
      "cve": "CVE-2026-33810",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-04-08T02:01:09.100830+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456335"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456335",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/763763",
          "url": "https://go.dev/cl/763763"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78332",
          "url": "https://go.dev/issue/78332"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
          "url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4866",
          "url": "https://pkg.go.dev/vuln/GO-2026-4866"
        }
      ],
      "release_date": "2026-04-08T01:06:56.546000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
    },
    {
      "cve": "CVE-2026-33818",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:12:37.151735+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/814980",
          "url": "https://go.dev/cl/814980"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80405",
          "url": "https://go.dev/issue/80405"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5972",
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "release_date": "2026-08-13T21:58:52.821000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
    },
    {
      "cve": "CVE-2026-39820",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-05-07T20:01:27.800929+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/759940",
          "url": "https://go.dev/cl/759940"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78566",
          "url": "https://go.dev/issue/78566"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4986",
          "url": "https://pkg.go.dev/vuln/GO-2026-4986"
        }
      ],
      "release_date": "2026-05-07T19:41:19.854000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
    },
    {
      "cve": "CVE-2026-39831",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-05-22T04:01:12.861178+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480675"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480675",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781662",
          "url": "https://go.dev/cl/781662"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79566",
          "url": "https://go.dev/issue/79566"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5019",
          "url": "https://pkg.go.dev/vuln/GO-2026-5019"
        }
      ],
      "release_date": "2026-05-22T02:31:27.436000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
    },
    {
      "cve": "CVE-2026-41178",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-06-04T16:01:10.300537+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484830"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484830",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
          "url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
        },
        {
          "category": "external",
          "summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
          "url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
        }
      ],
      "release_date": "2026-06-04T14:38:23.707000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
    },
    {
      "cve": "CVE-2026-42306",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-06-12T19:01:10.843543+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2488484"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in the Moby container framework where a race condition during `docker cp` mount setup could allow a malicious container to overwrite arbitrary host files. Exploitation requires an attacker to have control over a running container, which could lead to data corruption or denial of service on the host system.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "RHBZ#2488484",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488484"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42306",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306"
        },
        {
          "category": "external",
          "summary": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh",
          "url": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh"
        }
      ],
      "release_date": "2026-06-12T18:09:22.188000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup"
    },
    {
      "cve": "CVE-2026-42499",
      "cwe": {
        "id": "CWE-1046",
        "name": "Creation of Immutable Text Using String Concatenation"
      },
      "discovery_date": "2026-05-07T20:00:51.685602+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2467809"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "RHBZ#2467809",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/771520",
          "url": "https://go.dev/cl/771520"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78987",
          "url": "https://go.dev/issue/78987"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
          "url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4977",
          "url": "https://pkg.go.dev/vuln/GO-2026-4977"
        }
      ],
      "release_date": "2026-05-07T19:41:18.615000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
    },
    {
      "cve": "CVE-2026-42504",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-06-02T23:01:00.320527+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484204"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484204",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/774481",
          "url": "https://go.dev/cl/774481"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79217",
          "url": "https://go.dev/issue/79217"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5038",
          "url": "https://pkg.go.dev/vuln/GO-2026-5038"
        }
      ],
      "release_date": "2026-06-02T22:01:37.219000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
    },
    {
      "cve": "CVE-2026-44740",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-06-01T17:01:53.685793+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483894"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483894",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
          "url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
          "url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
          "url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
        }
      ],
      "release_date": "2026-06-01T16:04:50.358000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        },
        {
          "category": "workaround",
          "details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
    },
    {
      "cve": "CVE-2026-46597",
      "cwe": {
        "id": "CWE-681",
        "name": "Incorrect Conversion between Numeric Types"
      },
      "discovery_date": "2026-05-22T04:01:21.721980+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480678"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480678",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781620",
          "url": "https://go.dev/cl/781620"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79561",
          "url": "https://go.dev/issue/79561"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5013",
          "url": "https://pkg.go.dev/vuln/GO-2026-5013"
        }
      ],
      "release_date": "2026-05-22T02:31:26.754000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
    },
    {
      "cve": "CVE-2026-48050",
      "discovery_date": "2026-08-21T22:51:05.227994+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Arc. This vulnerability allows a remote unauthenticated attacker to access Go debug pprof endpoints due to improper authentication bypass. Successful exploitation can lead to the disclosure of sensitive runtime state information and enable a CPU-burn Denial of Service (DoS) attack, impacting the availability and confidentiality of the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has determined that this flaw does not affect any currently supported Red Hat products. The vulnerability resides in the Arc component (github.com/basekick-labs/arc), which is not shipped in, bundled with, or included as a dependency of any Red Hat offering. Because the affected code is not present in Red Hat products, they are not vulnerable to this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48050"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48050",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48050"
        }
      ],
      "release_date": "2026-08-21T22:40:12.771000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        },
        {
          "category": "workaround",
          "details": "No mitigation is required. Red Hat products do not ship or include the affected Arc component (github.com/basekick-labs/arc), so they are not exposed to this vulnerability.",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http/pprof: github.com/basekick-labs/arc: Arc: Information disclosure and Denial of Service via unauthenticated debug endpoints"
    },
    {
      "cve": "CVE-2026-56852",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2026-07-21T20:01:56.266823+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/794100",
          "url": "https://go.dev/cl/794100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80142",
          "url": "https://go.dev/issue/80142"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5970",
          "url": "https://pkg.go.dev/vuln/GO-2026-5970"
        }
      ],
      "release_date": "2026-07-21T19:18:59.951000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
    },
    {
      "cve": "CVE-2026-56853",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:14:53.561638+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515827"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515827",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/795540",
          "url": "https://go.dev/cl/795540"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80205",
          "url": "https://go.dev/issue/80205"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6089",
          "url": "https://pkg.go.dev/vuln/GO-2026-6089"
        }
      ],
      "release_date": "2026-08-13T21:58:53.092000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
    },
    {
      "cve": "CVE-2026-56858",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:32.034590+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515838"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515838",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/807100",
          "url": "https://go.dev/cl/807100"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80435",
          "url": "https://go.dev/issue/80435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6091",
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "release_date": "2026-08-13T21:58:53.354000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
    },
    {
      "cve": "CVE-2026-56859",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-08-13T22:16:52.493058+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515840"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515840",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803320",
          "url": "https://go.dev/cl/803320"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80481",
          "url": "https://go.dev/issue/80481"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6088",
          "url": "https://pkg.go.dev/vuln/GO-2026-6088"
        }
      ],
      "release_date": "2026-08-13T21:58:52.959000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
    },
    {
      "cve": "CVE-2026-56860",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-13T22:13:18.319384+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515820"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515820",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/803681",
          "url": "https://go.dev/cl/803681"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80494",
          "url": "https://go.dev/issue/80494"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6218",
          "url": "https://pkg.go.dev/vuln/GO-2026-6218"
        }
      ],
      "release_date": "2026-08-13T21:58:53.731000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
    },
    {
      "cve": "CVE-2026-56862",
      "cwe": {
        "id": "CWE-1050",
        "name": "Excessive Platform Resource Consumption within a Loop"
      },
      "discovery_date": "2026-08-13T22:16:41.928450+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515839"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515839",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/804261",
          "url": "https://go.dev/cl/804261"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/80528",
          "url": "https://go.dev/issue/80528"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-6090",
          "url": "https://pkg.go.dev/vuln/GO-2026-6090"
        }
      ],
      "release_date": "2026-08-13T21:58:53.216000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
    },
    {
      "cve": "CVE-2026-69153",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-08-03T18:01:01.506065+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510719"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration (the \u0027from\u0027 parameter) is not set. This can cause the application to read and expose unintended source-map files, potentially revealing sensitive information about the application\u0027s source code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postcss: PostCSS: Information disclosure via crafted sourceMappingURL",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this flaw as Moderate because the information disclosed is limited to files with a .map extension. Source map files may contain source code paths and content, but the attacker cannot read arbitrary files on the system. Exploitation requires the application to process attacker-controlled CSS through PostCSS on the server side.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69153"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510719",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510719"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69153",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69153"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69153",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69153"
        },
        {
          "category": "external",
          "summary": "https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8",
          "url": "https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"
        },
        {
          "category": "external",
          "summary": "https://github.com/postcss/postcss/releases/tag/8.5.19",
          "url": "https://github.com/postcss/postcss/releases/tag/8.5.19"
        },
        {
          "category": "external",
          "summary": "https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp",
          "url": "https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp"
        }
      ],
      "release_date": "2026-08-03T16:56:25.733000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        },
        {
          "category": "workaround",
          "details": "Pass map: false when invoking PostCSS to disable source map auto-loading. This prevents the path traversal from being triggered, though it removes source map support entirely.",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "postcss: PostCSS: Information disclosure via crafted sourceMappingURL"
    },
    {
      "cve": "CVE-2026-71556",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2026-08-07T16:51:14.251077+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2512562"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink, which, when cloned and its worktree operations are used, can lead to reading from or writing to arbitrary files outside the intended working directory. This could result in information disclosure or arbitrary file modification.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "go-git is a pure-Go implementation of Git. During worktree operations (checkout, status, add), go-git resolves symbolic links without confining resolution to the worktree boundary, so a maliciously crafted repository containing a symlink can cause a consuming application to read from or write to files outside the intended working directory when that repository is cloned and its worktree operations are used. Exploitation requires the application to clone an attacker-controlled repository and then perform worktree operations against it; applications that only process trusted repositories are not exposed. Red Hat rates the impact of this flaw as Important.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-71556"
        },
        {
          "category": "external",
          "summary": "RHBZ#2512562",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512562"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-71556",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-71556"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71556",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71556"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab",
          "url": "https://github.com/go-git/go-git/commit/008a78f2dd86f52544ddff8b8e8ddeecdf3f7aab"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac",
          "url": "https://github.com/go-git/go-git/commit/661d1c7f101d34e002a3cfcf8dbea5b7421d07ac"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/releases/tag/v5.19.2",
          "url": "https://github.com/go-git/go-git/releases/tag/v5.19.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.5",
          "url": "https://github.com/go-git/go-git/releases/tag/v6.0.0-alpha.5"
        },
        {
          "category": "external",
          "summary": "https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm",
          "url": "https://github.com/go-git/go-git/security/advisories/GHSA-hc8v-wwc9-vgxm"
        }
      ],
      "release_date": "2026-08-07T16:37:40.058000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        },
        {
          "category": "workaround",
          "details": "To reduce the risk of exploitation, do not clone or run worktree operations (checkout, status, add) on Git repositories originating from untrusted or attacker-controllable sources using an affected version of go-git. The issue is resolved by updating to go-git 5.19.2 or 6.0.0-alpha.5 (or later).",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution"
    },
    {
      "cve": "CVE-2026-81521",
      "cwe": {
        "id": "CWE-791",
        "name": "Incomplete Filtering of Special Elements"
      },
      "discovery_date": "2026-08-27T20:16:51.506209+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2525215"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the MongoDB Go Driver. The `Client.BulkWrite` operation does not properly validate database names, allowing a specially crafted name with reserved characters to redirect write operations. This vulnerability could enable an attacker to modify or corrupt data in unintended databases and collections.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "go.mongodb.org/mongo-driver: MongoDB Go Driver: Write redirection via unvalidated database name in Client.BulkWrite",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
        ],
        "known_not_affected": [
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
          "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
          "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
          "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
          "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-81521"
        },
        {
          "category": "external",
          "summary": "RHBZ#2525215",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525215"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-81521",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-81521"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-81521",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81521"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/go.mongodb.org/mongo-driver/v2@v2.8.2",
          "url": "https://pkg.go.dev/go.mongodb.org/mongo-driver/v2@v2.8.2"
        }
      ],
      "release_date": "2026-08-27T18:31:45.450000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T18:05:40+00:00",
          "details": "See the following documentation for details on how to enable Red Hat Edge\nManager and more:\nhttps://docs.redhat.com/en/documentation/red_hat_edge_manager/1.1",
          "product_ids": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68334"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "10Base-RHEM-1.1:flightctl-0:1.1.4-1.el10em.src",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el10em.x86_64",
            "10Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el10em.noarch",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.aarch64",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.ppc64le",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.s390x",
            "10Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el10em.x86_64",
            "9Base-RHEM-1.1:flightctl-0:1.1.4-1.el9em.src",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-agent-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-cli-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-observability-0:1.1.4-1.el9em.x86_64",
            "9Base-RHEM-1.1:flightctl-selinux-0:1.1.4-1.el9em.noarch",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.aarch64",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.ppc64le",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.s390x",
            "9Base-RHEM-1.1:flightctl-services-0:1.1.4-1.el9em.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "go.mongodb.org/mongo-driver: MongoDB Go Driver: Write redirection via unvalidated database name in Client.BulkWrite"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.