{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-33816", "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "state": "PUBLISHED", "assignerShortName": "Go", "dateReserved": "2026-03-23T20:35:32.814Z", "datePublished": "2026-04-07T15:19:24.529Z", "dateUpdated": "2026-09-03T12:04:35.686Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", "dateUpdated": "2026-04-15T15:49:13.116Z" }, "title": "CVE-2026-33816 in github.com/jackc/pgx", "descriptions": [ { "lang": "en", "value": "Memory-safety vulnerability in github.com/jackc/pgx/v5." } ], "affected": [ { "vendor": "github.com/jackc/pgx/v5", "product": "github.com/jackc/pgx/v5/pgproto3", "collectionURL": "https://pkg.go.dev", "packageName": "github.com/jackc/pgx/v5/pgproto3", "versions": [ { "version": "0", "lessThan": "5.9.0", "status": "affected", "versionType": "semver" } ], "programRoutines": [ { "name": "FunctionCall.Decode" }, { "name": "Backend.Receive" } ], "defaultStatus": "unaffected" } ], "problemTypes": [ { "descriptions": [ { "lang": "en", "description": "CWE-697 — Incorrect Comparison" } ] } ], "references": [ { "url": "https://pkg.go.dev/vuln/GO-2026-4772" } ] }, "adp": [ { "metrics": [ { "cvssV3_1": { "scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH" } }, { "other": { "type": "ssvc", "content": { "timestamp": "2026-04-09T14:24:50.570972Z", "id": "CVE-2026-33816", "options": [ { "Exploitation": "none" }, { "Automatable": "yes" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-14T16:04:30.991Z" } }, { "affected": [ { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:cryostat:4::el9" ], "defaultStatus": "affected", "packageName": "cryostat/cryostat-storage-rhel9", "product": "Cryostat 4 on RHEL 9", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "4.2.0-13", "versionType": "rpm" } ] }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/o:redhat:enterprise_linux:10.2" ], "defaultStatus": "affected", "packageName": "go-fdo-server", "product": "Red Hat Enterprise Linux 10", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "0:1.0.1-1.el10_2", "versionType": "rpm" } ] }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:edge_manager:1.0::el9" ], "defaultStatus": "affected", "packageName": "flightctl", "product": "RHEM 1.0 for RHEL 9", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "0:1.0.3-1.el9em", "versionType": "rpm" } ] }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el10" ], "defaultStatus": "affected", "packageName": "flightctl", "product": "RHEM 1.1 for RHEL 10", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "0:1.1.3-1.el10em", "versionType": "rpm" } ] }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el9" ], "defaultStatus": "affected", "packageName": "flightctl", "product": "RHEM 1.1 for RHEL 9", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "0:1.1.3-1.el9em", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9" ], "defaultStatus": "affected", "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9", "product": "Custom Metric Autoscaler 2.19", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1780101236", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9" ], "defaultStatus": "affected", "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9", "product": "Custom Metric Autoscaler 2.19", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1780101226", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9" ], "defaultStatus": "affected", "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9", "product": "Custom Metric Autoscaler 2.19", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1780101239", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9" ], "defaultStatus": "affected", "packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator", "product": "Custom Metric Autoscaler 2.19", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1779953535", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub:1.3::el9" ], "defaultStatus": "affected", "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9", "product": "Multicluster Global Hub 1.3.4", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1779210675", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub:1.3::el9" ], "defaultStatus": "affected", "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9", "product": "Multicluster Global Hub 1.3.4", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1779210608", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub:1.3::el9" ], "defaultStatus": "affected", "packageName": "multicluster-globalhub/multicluster-globalhub-rhel9-operator", "product": "Multicluster Global Hub 1.3.4", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1779209992", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub:1.7::el9" ], "defaultStatus": "affected", "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9", "product": "Multicluster Global Hub 1.7.0", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1779925273", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:acm:2.15::el9" ], "defaultStatus": "affected", "packageName": "rhacm2/acm-grafana-rhel9", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.15", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1780677003", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:acm:2.16::el9" ], "defaultStatus": "affected", "packageName": "rhacm2/acm-grafana-rhel9", "product": "Red Hat Advanced Cluster Management for Kubernetes 2.16", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1780926805", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:advanced_cluster_security:4.8::el8" ], "defaultStatus": "affected", "packageName": "advanced-cluster-security/rhacs-main-rhel8", "product": "Red Hat Advanced Cluster Security 4.8", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1777307791", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:advanced_cluster_security:4.8::el8" ], "defaultStatus": "affected", "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8", "product": "Red Hat Advanced Cluster Security 4.8", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1777307791", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:advanced_cluster_security:4.8::el8" ], "defaultStatus": "affected", "packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8", "product": "Red Hat Advanced Cluster Security 4.8", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1777307791", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:advanced_cluster_security:4.10::el8" ], "defaultStatus": "affected", "packageName": "advanced-cluster-security/rhacs-main-rhel8", "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1777976489", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:advanced_cluster_security:4.10::el8" ], "defaultStatus": "affected", "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8", "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1777976489", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:advanced_cluster_security:4.10::el8" ], "defaultStatus": "affected", "packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8", "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1777976489", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:advanced_cluster_security:4.9::el8" ], "defaultStatus": "affected", "packageName": "advanced-cluster-security/rhacs-main-rhel8", "product": "Red Hat Advanced Cluster Security for Kubernetes 4.9", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1777986630", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:advanced_cluster_security:4.9::el8" ], "defaultStatus": "affected", "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8", "product": "Red Hat Advanced Cluster Security for Kubernetes 4.9", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1777986630", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:advanced_cluster_security:4.9::el8" ], "defaultStatus": "affected", "packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8", "product": "Red Hat Advanced Cluster Security for Kubernetes 4.9", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1777986630", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el10" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-alert-exporter-rhel10", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784194638", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el10" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-alertmanager-proxy-rhel10", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784194353", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el10" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-api-rhel10", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784196588", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el10" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-cli-artifacts-rhel10", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784195620", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el10" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-db-setup-rhel10", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784194309", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el10" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-pam-issuer-rhel10", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784194653", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el10" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-periodic-rhel10", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784194144", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el10" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-telemetry-gateway-rhel10", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784194980", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el10" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-userinfo-proxy-rhel10", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784194347", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el10" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-worker-rhel10", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784194971", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el9" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-alert-exporter-rhel9", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784128388", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el9" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-alertmanager-proxy-rhel9", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784128860", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el9" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-api-rhel9", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784126780", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el9" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-cli-artifacts-rhel9", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784127787", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el9" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-db-setup-rhel9", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784126762", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el9" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-pam-issuer-rhel9", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784126774", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el9" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-periodic-rhel9", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784127791", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el9" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-telemetry-gateway-rhel9", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784127135", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el9" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-userinfo-proxy-rhel9", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784126733", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:edge_manager:1.1::el9" ], "defaultStatus": "affected", "packageName": "rhem/flightctl-worker-rhel9", "product": "Red Hat Edge Manager 1.1", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784127775", "versionType": "rpm" } ] }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:hummingbird:1" ], "defaultStatus": "affected", "packageName": "go-fdo-server-main", "product": "Red Hat Hardened Images", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1.0.1-0.1.hum1", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/cephcsi-rhel9", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1783667125", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/cephcsi-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1783666755", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/mcg-core-rhel9", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784054598", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/mcg-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784055387", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/ocs-client-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784055726", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/ocs-client-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1783667517", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/ocs-metrics-exporter-rhel9", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1783667577", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/ocs-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1783667611", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/odf-cli-rhel9", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784055020", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/odf-cloudnative-pg-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1783667641", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/odf-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784055586", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/odf-cosi-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1783667790", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/odf-csi-addons-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1783667859", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/odf-csi-addons-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1783667875", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/odf-external-snapshotter-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1783667869", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/odf-external-snapshotter-sidecar-rhel9", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1783667877", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/odf-multicluster-console-rhel9", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784055576", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/odf-multicluster-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784055244", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/odf-must-gather-rhel9", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1784055382", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/odf-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1783668266", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/odr-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1783668288", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_data_foundation:4.20::el9" ], "defaultStatus": "affected", "packageName": "odf4/rook-ceph-rhel9-operator", "product": "Red Hat Openshift Data Foundation 4.2", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1783669219", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:openshift_pipelines:1.21::el9" ], "defaultStatus": "affected", "packageName": "openshift-pipelines/pipelines-results-api-rhel9", "product": "Red Hat OpenShift Pipelines 1.21", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1780641574", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:trusted_artifact_signer:1.3::el9" ], "defaultStatus": "affected", "packageName": "rhtas/createtree-rhel9", "product": "Red Hat Trusted Artifact Signer 1.3", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1780053572", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:trusted_artifact_signer:1.3::el9" ], "defaultStatus": "affected", "packageName": "rhtas/certificate-transparency-rhel9", "product": "Red Hat Trusted Artifact Signer 1.3", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1780048814", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:trusted_artifact_signer:1.3::el9" ], "defaultStatus": "affected", "packageName": "rhtas/trillian-database-rhel9", "product": "Red Hat Trusted Artifact Signer 1.3", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1780053572", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:trusted_artifact_signer:1.3::el9" ], "defaultStatus": "affected", "packageName": "rhtas/trillian-logserver-rhel9", "product": "Red Hat Trusted Artifact Signer 1.3", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1780053572", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:trusted_artifact_signer:1.3::el9" ], "defaultStatus": "affected", "packageName": "rhtas/trillian-logsigner-rhel9", "product": "Red Hat Trusted Artifact Signer 1.3", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1780053572", "versionType": "rpm" } ] }, { "collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": [ "cpe:/a:redhat:trusted_artifact_signer:1.3::el9" ], "defaultStatus": "affected", "packageName": "rhtas/updatetree-rhel9", "product": "Red Hat Trusted Artifact Signer 1.3", "vendor": "Red Hat", "versions": [ { "lessThan": "*", "status": "unaffected", "version": "1780053572", "versionType": "rpm" } ] }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2" ], "defaultStatus": "unaffected", "packageName": "redhat-user-workloads/custom-metrics-autoscaler-operator", "product": "Custom Metric Autoscaler operator for Red Hat Openshift", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2" ], "defaultStatus": "unaffected", "packageName": "redhat-user-workloads/keda-adapter", "product": "Custom Metric Autoscaler operator for Red Hat Openshift", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2" ], "defaultStatus": "unaffected", "packageName": "redhat-user-workloads/keda-webhooks", "product": "Custom Metric Autoscaler operator for Red Hat Openshift", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_engine" ], "defaultStatus": "affected", "packageName": "multicluster-engine/assisted-service-9-rhel9", "product": "Multicluster Engine for Kubernetes", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_engine" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/azure-service-operator-mce-211", "product": "Multicluster Engine for Kubernetes", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel8", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel8", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "unaffected", "packageName": "multicluster-globalhub/multicluster-globalhub-operator-bundle", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "multicluster-globalhub/multicluster-globalhub-rhel8-operator", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/multicluster-global-hub-agent-globalhub-1-4", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/multicluster-global-hub-agent-globalhub-1-5", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/multicluster-global-hub-agent-globalhub-1-6", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/multicluster-global-hub-agent-globalhub-1-7", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/multicluster-global-hub-manager-globalhub-1-4", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/multicluster-global-hub-manager-globalhub-1-5", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/multicluster-global-hub-manager-globalhub-1-6", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/multicluster-global-hub-manager-globalhub-1-7", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/multicluster-global-hub-operator-globalhub-1-4", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/multicluster-global-hub-operator-globalhub-1-5", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/multicluster-global-hub-operator-globalhub-1-6", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:multicluster_globalhub" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/multicluster-global-hub-operator-globalhub-1-7", "product": "Multicluster Global Hub", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:openshift_pipelines:1" ], "defaultStatus": "affected", "packageName": "openshift-pipelines/pipelines-results-retention-policy-agent-rhel9", "product": "OpenShift Pipelines", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:red_hat_3scale_amp:2" ], "defaultStatus": "affected", "packageName": "3scale-amp2/3scale-operator-bundle", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:red_hat_3scale_amp:2" ], "defaultStatus": "affected", "packageName": "3scale-amp2/3scale-rhel7-operator", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:red_hat_3scale_amp:2" ], "defaultStatus": "affected", "packageName": "3scale-amp2/3scale-rhel9-operator", "product": "Red Hat 3scale API Management Platform 2", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:advanced_cluster_security:4" ], "defaultStatus": "unaffected", "packageName": "rhacs-eng/release-operator", "product": "Red Hat Advanced Cluster Security 4", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:advanced_cluster_security:4" ], "defaultStatus": "affected", "packageName": "rhacs-eng/release-roxctl", "product": "Red Hat Advanced Cluster Security 4", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:advanced_cluster_security:4" ], "defaultStatus": "affected", "packageName": "rhacs-eng/release-scanner-v4", "product": "Red Hat Advanced Cluster Security 4", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:edge_manager:1" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/flightctl-alertmanager-proxy", "product": "Red Hat Edge Manager 1", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:edge_manager:1" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/flightctl-api", "product": "Red Hat Edge Manager 1", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:edge_manager:1" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/flightctl-cli-artifacts", "product": "Red Hat Edge Manager 1", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:edge_manager:1" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/flightctl-db-setup", "product": "Red Hat Edge Manager 1", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:edge_manager:1" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/flightctl-pam-issuer", "product": "Red Hat Edge Manager 1", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:edge_manager:1" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/flightctl-periodic", "product": "Red Hat Edge Manager 1", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:edge_manager:1" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/flightctl-telemetry-gateway", "product": "Red Hat Edge Manager 1", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:edge_manager:1" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/flightctl-userinfo-proxy", "product": "Red Hat Edge Manager 1", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:edge_manager:1" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/flightctl-worker", "product": "Red Hat Edge Manager 1", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:hummingbird:1" ], "defaultStatus": "unaffected", "packageName": "caddy", "product": "Red Hat Hardened Images", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:openshift_ai" ], "defaultStatus": "unaffected", "packageName": "rhoai/odh-maas-api-rhel9", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:openshift_ai" ], "defaultStatus": "affected", "packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:openshift_ai" ], "defaultStatus": "affected", "packageName": "rhoai/odh-ml-pipelines-driver-rhel9", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:openshift_ai" ], "defaultStatus": "affected", "packageName": "rhoai/odh-ml-pipelines-launcher-rhel9", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:openshift_ai" ], "defaultStatus": "affected", "packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:openshift_ai" ], "defaultStatus": "affected", "packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:openshift_ai" ], "defaultStatus": "affected", "packageName": "rhoai/odh-model-registry-rhel9", "product": "Red Hat OpenShift AI (RHOAI)", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:quay:3" ], "defaultStatus": "unaffected", "packageName": "redhat-user-workloads/quay-clair-v3-17", "product": "Red Hat Quay 3", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:trusted_artifact_signer:1" ], "defaultStatus": "affected", "packageName": "securesign/trillian-createtree", "product": "Red Hat Trusted Artifact Signer", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:trusted_artifact_signer:1" ], "defaultStatus": "affected", "packageName": "securesign/trillian-database", "product": "Red Hat Trusted Artifact Signer", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:trusted_artifact_signer:1" ], "defaultStatus": "affected", "packageName": "securesign/trillian-logserver", "product": "Red Hat Trusted Artifact Signer", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:trusted_artifact_signer:1" ], "defaultStatus": "affected", "packageName": "securesign/trillian-logsigner", "product": "Red Hat Trusted Artifact Signer", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:trusted_artifact_signer:1" ], "defaultStatus": "affected", "packageName": "securesign/trillian-updatetree", "product": "Red Hat Trusted Artifact Signer", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:zero_trust_workload_identity_manager:1" ], "defaultStatus": "unaffected", "packageName": "redhat-user-workloads/spiffe-spire-agent-1-13-3", "product": "Zero Trust Workload Identity Manager", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:zero_trust_workload_identity_manager:1" ], "defaultStatus": "unaffected", "packageName": "redhat-user-workloads/spiffe-spire-oidc-discovery-provider-1-13-3", "product": "Zero Trust Workload Identity Manager", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:zero_trust_workload_identity_manager:1" ], "defaultStatus": "unaffected", "packageName": "redhat-user-workloads/spiffe-spire-server-1-13-3", "product": "Zero Trust Workload Identity Manager", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:zero_trust_workload_identity_manager:0" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/spiffe-spire-agent-1-12-4", "product": "Zero Trust Workload Identity Manager - Tech Preview", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:zero_trust_workload_identity_manager:0" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/spiffe-spire-oidc-discovery-provider-1-12-4", "product": "Zero Trust Workload Identity Manager - Tech Preview", "vendor": "Red Hat" }, { "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": [ "cpe:/a:redhat:zero_trust_workload_identity_manager:0" ], "defaultStatus": "affected", "packageName": "redhat-user-workloads/spiffe-spire-server-1-12-4", "product": "Zero Trust Workload Identity Manager - Tech Preview", "vendor": "Red Hat" } ], "datePublic": "2026-04-07T15:19:24.529Z", "descriptions": [ { "lang": "en", "value": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption." } ], "metrics": [ { "other": { "content": { "namespace": "https://access.redhat.com/security/updates/classification/", "value": "Important" }, "type": "Red Hat severity rating" } }, { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "version": "3.1" }, "format": "CVSS" } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-787", "description": "Out-of-bounds Write", "lang": "en", "type": "CWE" } ] } ], "references": [ { "tags": [ "vdb-entry", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/security/cve/CVE-2026-33816" }, { "name": "RHBZ#2455972", "tags": [ "issue-tracking", "x_refsource_REDHAT" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972" }, { "tags": [ "x_sadp-csaf-vex" ], "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33816.json" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:41019" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:17789" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:36796" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:19137" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:26636" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:22423" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:24503" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:24539" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:25273" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:11070" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:11217" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:13829" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:13791" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:40945" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:40118" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:13907" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:26519" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:40984" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:24479" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:24475" }, { "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2026:24482" } ], "solutions": [ { "lang": "en", "value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9" }, { "lang": "en", "value": "RHSA-2026:17789: Cryostat 4 on RHEL 9" }, { "lang": "en", "value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9" }, { "lang": "en", "value": "RHSA-2026:19137: Red Hat Enterprise Linux AppStream (v. 10)" }, { "lang": "en", "value": "RHSA-2026:26636: Custom Metric Autoscaler 2.19" }, { "lang": "en", "value": "RHSA-2026:22423: Multicluster Global Hub 1.3.4" }, { "lang": "en", "value": "RHSA-2026:24503: Multicluster Global Hub 1.7.0" }, { "lang": "en", "value": "RHSA-2026:24539: Red Hat Advanced Cluster Management for Kubernetes 2.15" }, { "lang": "en", "value": "RHSA-2026:25273: Red Hat Advanced Cluster Management for Kubernetes 2.16" }, { "lang": "en", "value": "RHSA-2026:11070: Red Hat Advanced Cluster Security 4.8" }, { "lang": "en", "value": "RHSA-2026:11217: Red Hat Advanced Cluster Security 4.8" }, { "lang": "en", "value": "RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10" }, { "lang": "en", "value": "RHSA-2026:13791: Red Hat Advanced Cluster Security for Kubernetes 4.9" }, { "lang": "en", "value": "RHSA-2026:40945: Red Hat Edge Manager 1.1" }, { "lang": "en", "value": "RHSA-2026:40118: Red Hat Edge Manager 1.1" }, { "lang": "en", "value": "RHSA-2026:13907: Red Hat Hardened Images" }, { "lang": "en", "value": "RHSA-2026:26519: Red Hat OpenShift Pipelines 1.21" }, { "lang": "en", "value": "RHSA-2026:40984: Red Hat Openshift Data Foundation 4.2" }, { "lang": "en", "value": "RHSA-2026:24479: Red Hat Trusted Artifact Signer 1.3" }, { "lang": "en", "value": "RHSA-2026:24475: Red Hat Trusted Artifact Signer 1.3" }, { "lang": "en", "value": "RHSA-2026:24482: Red Hat Trusted Artifact Signer 1.3" } ], "timeline": [ { "lang": "en", "time": "2026-04-07T16:01:14.142Z", "value": "Reported to Red Hat." }, { "lang": "en", "time": "2026-04-07T15:19:24.529Z", "value": "Made public." } ], "title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability", "workarounds": [ { "lang": "en", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability." } ], "x_adpType": "supplier", "x_generator": { "engine": "sadp-cli 1.0.0" }, "providerMetadata": { "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "shortName": "redhat-SADP", "dateUpdated": "2026-09-03T12:04:35.686Z" } } ] } }