BlackTreeCVE Intelligence
Material CVE changesDuplicate refreshes excludedSource-attributed evidence
Change intelligence · 1999–2026 catalogue

Material CVE updates

See newly actionable facts without comparing complete reports manually. Cosmetic source edits and repeated refreshes are excluded.

9,169CVEs changed · showing 30 on this page

Open a record to inspect its material changes, evidence source and before-and-after values.

CVE-2026-90959Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theftRed Hat · Red Hat Ansible Automation Platform 2.6 for RHEL 9CVSS 3.1 · 8.1 High9 material changes
  1. Remediation statusRemediation status changed from Mitigation available to Patch available.
    Show before and after
    Before
    Mitigation available
    After
    Patch available
  2. Vendor guidanceAuthoritative vendor guidance changed from remediation: access.redhat.com/CVE-2026-90959 to remediation: access.redhat.com/CVE-2026-90959.
    Show before and after
    Before
    remediation: access.redhat.com/CVE-2026-90959
    After
    remediation: access.redhat.com/CVE-2026-90959
  3. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    ansible-automation-platform-25/hub-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/hub-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/hub-rhel9 as a component of Red Hat Ansible Automation Platform 2; python3.12-pulpcore.src as a component of Red Hat Ansible Automation Platform 2; python-pulpcore.src as a component of Red Hat Satellite 6; python3-pulpcore as a component of Red Hat Satellite 6; python3.12-pulpcore.src as a component of Red Hat Satellite 6; rhui5/rhua-rhel9 as a component of Red Hat Update Infrastructure 5
    After
    ansible-automation-platform-25/hub-rhel8 as a component of Red Hat Ansible Automation Platform 2; python-pulpcore.src as a component of Red Hat Satellite 6; python3-pulpcore as a component of Red Hat Satellite 6; python3.12-pulpcore.src as a component of Red Hat Satellite 6; rhui5/rhua-rhel9 as a component of Red Hat Update Infrastructure 5 · Fixed: python3.12-pulpcore-0:3.49.71-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9; python3.12-pulpcore-0:3.49.71-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9; registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:03f30e5e1726b47751562d16ab3c074a8ae88a0cd44c06623dd6891b7e51fc0f_amd64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:60c40fe2e5b5867e007f92144aa6c647950a5e21858df018a956378fc5da9a57_s390x as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:9b41d7a45980a14e1e38e5ed78a731bcbaab14af96a2e50239a93402dbf37309_arm64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:aa5093e5f4d21d701aefc982708fc719dde40f6ce83a5388410cec468e58fcb7_ppc64le as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:548e424d20b5941ef8a4230477c06e0bea6eac55eaa82c6eb0968abd5eb971c7_arm64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:cec6b57c19411668752fdaa9d5db8e3ac64be0d1ccd268f1828f4ccd0903dd87_amd64 as a component of Red Hat Ansible Automation Platform 2.7
  4. Vendor guidanceAuthoritative vendor guidance changed: removed vendor advisory: access.redhat.com/RHSA-2026:87004; removed vendor advisory: access.redhat.com/RHSA-2026:87120; 1 further removals.
    Show before and after
    Before
    remediation: access.redhat.com/RHSA-2026:87004 · vendor advisory: access.redhat.com/RHSA-2026:87004 · vendor advisory: access.redhat.com/RHSA-2026:87120 · 1 more references
    After
    remediation: access.redhat.com/RHSA-2026:87004
  5. Vendor guidanceAuthoritative vendor guidance changed: added vendor advisory: access.redhat.com/RHSA-2026:87120; added vendor advisory: access.redhat.com/RHSA-2026:87124.
    Show before and after
    Before
    remediation: access.redhat.com/RHSA-2026:87004 · vendor advisory: access.redhat.com/RHSA-2026:87004
    After
    remediation: access.redhat.com/RHSA-2026:87004 · vendor advisory: access.redhat.com/RHSA-2026:87004 · vendor advisory: access.redhat.com/RHSA-2026:87120 · 1 more references
  6. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    See the vendor and CVE records for the affected range. · Fixed: Red Hat Ansible Automation Platform 2.6 for RHEL 9: 0:3.49.71-1.el9ap < *
    After
    See the vendor and CVE records for the affected range. · Fixed: Red Hat Ansible Automation Platform 2.6 for RHEL 9: 0:3.49.71-1.el9ap < *; Red Hat Ansible Automation Platform 2.6: 1791947385 < *; Red Hat Ansible Automation Platform 2.7: 1792388670 < *
  7. Remediation statusRemediation status changed from Awaiting fix to Patch available.
    Show before and after
    Before
    Awaiting fix
    After
    Patch available
  8. Vendor guidanceAuthoritative vendor guidance changed: added remediation: access.redhat.com/RHSA-2026:87004; added vendor advisory: access.redhat.com/RHSA-2026:87004.
    Show before and after
    Before
    no authoritative guidance recorded
    After
    remediation: access.redhat.com/RHSA-2026:87004 · vendor advisory: access.redhat.com/RHSA-2026:87004
  9. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    See the vendor and CVE records for the affected range. · Fixed: No fixed version is explicitly recorded in the structured CVE data.
    After
    See the vendor and CVE records for the affected range. · Fixed: Red Hat Ansible Automation Platform 2.6 for RHEL 9: 0:3.49.71-1.el9ap < *
Open full change history →
CVE-2026-102930virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before usepypa · virtualenvCVSS 4.0 · 7.7 High5 material changes
  1. BlackTree coverageBlackTree article coverage changed from 1 BlackTree article to 1 BlackTree article.
    Show before and after
    Before
    1 BlackTree article
    After
    1 BlackTree article
  2. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    python-virtualenv as component of SUSE Linux Enterprise Desktop 15 SP7; python311-virtualenv as component of SUSE Linux Enterprise Desktop 15 SP7; SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python311-virtualenv; python-virtualenv as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS; python3-virtualenv as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS; python311-virtualenv as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS; python-virtualenv as component of SUSE Linux Enterprise High Performance Computing 15 SP4; python3-virtualenv as component of SUSE Linux Enterprise High Performance Computing 15 SP4; python311-virtualenv as component of SUSE Linux Enterprise High Performance Computing 15 SP4; SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:python311-virtualenv; python-virtualenv as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS; python3-virtualenv as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS; python311-virtualenv as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS; python-virtualenv as component of SUSE Linux Enterprise High Performance Computing 15 SP5; python3-virtualenv as component of SUSE Linux Enterprise High Performance Computing 15 SP5; python311-virtualenv as component of SUSE Linux Enterprise High Performance Computing 15 SP5; python-virtualenv as component of SUSE Linux Enterprise Module for Python 3 15 SP7; python311-virtualenv as component of SUSE Linux Enterprise Module for Python 3 15 SP7; python-virtualenv as component of SUSE Linux Enterprise Server 15 SP4-LTSS; python3-virtualenv as component of SUSE Linux Enterprise Server 15 SP4-LTSS; python311-virtualenv as component of SUSE Linux Enterprise Server 15 SP4-LTSS; SUSE Linux Enterprise Server 15 SP4-TERADATA:python311-virtualenv; python-virtualenv as component of SUSE Linux Enterprise Server 15 SP4; python3-virtualenv as component of SUSE Linux Enterprise Server 15 SP4; python311-virtualenv as component of SUSE Linux Enterprise Server 15 SP4; python-virtualenv as component of SUSE Linux Enterprise Server 15 SP5-LTSS; python3-virtualenv as component of SUSE Linux Enterprise Server 15 SP5-LTSS; python311-virtualenv as component of SUSE Linux Enterprise Server 15 SP5-LTSS; python-virtualenv as component of SUSE Linux Enterprise Server 15 SP5; python3-virtualenv as component of SUSE Linux Enterprise Server 15 SP5; and 27 more
    After
    python-virtualenv as component of SUSE Linux Enterprise Server 16.1; python313-virtualenv as component of SUSE Linux Enterprise Server 16.1; python-virtualenv as component of SUSE Linux Enterprise Server for SAP applications 16.1; python313-virtualenv as component of SUSE Linux Enterprise Server for SAP applications 16.1; python-virtualenv as component of openSUSE Leap 16.1
  3. Remediation statusRemediation status changed from Mitigation available to Patch available.
    Show before and after
    Before
    Mitigation available
    After
    Patch available
  4. Vendor guidanceAuthoritative vendor guidance changed from remediation: access.redhat.com/CVE-2026-102930 to remediation: access.redhat.com/CVE-2026-102930.
    Show before and after
    Before
    remediation: access.redhat.com/CVE-2026-102930
    After
    remediation: access.redhat.com/CVE-2026-102930
  5. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed; ansible-automation-platform-25/ansible-dev-tools-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/ansible-dev-tools-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/eda-controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/lightspeed-chatbot-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ansible-dev-tools-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ansible-devspaces-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/eda-controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-tech-preview/ansible-devspaces-rhel9 as a component of Red Hat Ansible Automation Platform 2; python-virtualenv.src as a component of Red Hat Ansible Automation Platform 2; python3.12-virtualenv.src as a component of Red Hat Ansible Automation Platform 2; rhel8/python-36 as a component of Red Hat Enterprise Linux 8; rhai-early-access/docling-serve-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-feature-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-agent-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-controller-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-router-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-ta-lmes-job-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-training-rocm64-torch28-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-trustyai-nemo-guardrails-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); and 11 more
    After
    openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed; ansible-automation-platform-25/ansible-dev-tools-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/ansible-dev-tools-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ansible-dev-tools-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/ansible-devspaces-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/controller-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-tech-preview/ansible-devspaces-rhel9 as a component of Red Hat Ansible Automation Platform 2; python-virtualenv.src as a component of Red Hat Ansible Automation Platform 2; python3.12-virtualenv.src as a component of Red Hat Ansible Automation Platform 2; rhel8/python-36 as a component of Red Hat Enterprise Linux 8; rhai-early-access/docling-serve-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces; satellite/iop-advisor-backend-rhel9 as a component of Red Hat Satellite 6; satellite/iop-host-inventory-rhel9 as a component of Red Hat Satellite 6; satellite/iop-yuptoo-rhel9 as a component of Red Hat Satellite 6; ansible-automation-platform/bootc-automation-portal-rhel9 as a component of Self-service automation portal 2 · Fixed: registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b23124e00cef1b48506d7dd2a0176edc177fd35c74aed926678dd0b233cfd78c_s390x as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:bdcc75b9685593bee122438e4610a541ef368656a764a892770bc61788198a13_ppc64le as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:dce369017fd6b2f9c01d15986d35807cbcdd2f668e15e0260c6b083d8859ab73_amd64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:f21492c5eb5761637d061332750017ab2c8733a8bbd7a6ce091d64fb67d8d256_arm64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:22151ba5f3dad82bed2d07ea7a439513dbd268a46584398f66824663c5ab1244_ppc64le as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:bf0552430aeda1fedf1fdb86b578e0fbf10964c085a19ebf7f633882b0cfbbe6_s390x as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:d4c2821fb38e6302a9619334680e0666013ea61f0a24e8995c78b2d2ae681c4c_arm64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e12435567dbb85270f1f9b53dbb939a49e9621b2c3d64f119956c59e99b6df4e_amd64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:7d14e4a2527dc77b8052a0f736cef02ff2eca403608aba015239b7488cc402e7_amd64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:e40310bfa9bb7d1e597bafd12133b77efc24f14e68f93dfcf3baaa69f60edcbb_arm64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:1ddd567dacafb048d99459bc862b1cc0cf8e55c8d96c859f6caa81e3e54c730c_amd64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:2ab7db5cf76ad5e411ab4c51d5ffc7d2a0dbae4f32d8efe091f7118d9622cf71_ppc64le as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:78ef44a2ed8bb9ace068af64e10eeaddfb8d4e9826bea5554ef46ac2a5c9ad73_arm64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-ta-lmes-job-rhel9@sha256:14e1b5ac1d8939a8d865c67cee2efe627aa6afb0cd8c6918a3d905667f40376f_amd64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-ta-lmes-job-rhel9@sha256:48c020732590131e34023537e288721eb29fb76595189bb0fcdd1d834b4d0d67_s390x as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-ta-lmes-job-rhel9@sha256:51d5ceb9937e6b1138666a9c4146375b3d7cd68a211af2169dabbe767937477b_ppc64le as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-ta-lmes-job-rhel9@sha256:a0dedceb86c8ea8d32daec592b172273faa25ec2c11c86688aa17a4db04c1daf_arm64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:3a0ef241078b761bed2dfd2c9d86798d998a82a36f856da21cce068a1ff032bd_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:4889829051aba21ec882d8c8912d63494ad9b663102ba441b3ad4cef296b97b7_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:5df7d7c98f80be61f6b0b0adf11069494eea29c88387ed8b46538bf258dfb5a5_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-kserve-agent-rhel9@sha256:18eb52b8f8ed403671396e49370216a8a553d79dfe33efb3cae79284eb40643a_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-kserve-agent-rhel9@sha256:2813ff65f6c95074862dd66221b7b9b9e99430b3a5d27eba5203e107023f69e9_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-kserve-agent-rhel9@sha256:636ba382740d2c14ace1c03d8474e460dc78929237e1efae7bd2da58605fb9f8_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-kserve-agent-rhel9@sha256:e7063293523536dcb008ff4e9479d05b40a9caa9b0f189318ff1c8362d08602a_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-kserve-controller-rhel9@sha256:51997b1a7e5e2f3c0bd76b7d23fda33902843addafcbba6333b27d5c72beb5c4_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-kserve-controller-rhel9@sha256:526196c1815fb5d3e19bdc5ba7057cd9f8f5f4812f4fec40b5b49f8ddd81a04e_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-kserve-controller-rhel9@sha256:a2967b5e30b4b8c6299abde8dc0fcab8ceb15581aff94dda4f02ac6e6aa05cb7_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-kserve-controller-rhel9@sha256:ef44a44ffedf8d0c2b9efc98e48ca69a957e6b0d81a362aefed17f887de123b9_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-kserve-router-rhel9@sha256:24cf45f8cc50e378b6a7ecb0f42568f6426242af8b2751d60350d04b3817ccd4_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-kserve-router-rhel9@sha256:3d602b9c38076730a0972ed143ff886d2018ef9ffbcc9ca339ad8dade8bfb05f_ppc64le as a component of Red Hat OpenShift AI 3.4; and 23 more
Open full change history →
CVE-2026-109618RCE via OOM corruptionPHP Group · PHPCVSS 4.0 · 9.2 Critical5 material changes
  1. BlackTree coverageBlackTree article coverage changed from no BlackTree article to 1 BlackTree article.
    Show before and after
    Before
    no BlackTree article
    After
    1 BlackTree article
  2. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    PHP: 8.2.* < 8.2.35, 8.3.* < 8.3.36, 8.4.* < 8.4.27, 8.5.* < 8.5.12 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
    After
    PHP: 8.2.* < 8.2.35, 8.3.* < 8.3.36, 8.4.* < 8.4.27, 8.5.* < 8.5.12 · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
  3. Remediation statusRemediation status changed from Mitigation available to Patch available.
    Show before and after
    Before
    Mitigation available
    After
    Patch available
  4. Remediation statusRemediation status changed from Awaiting fix to Mitigation available.
    Show before and after
    Before
    Awaiting fix
    After
    Mitigation available
  5. Vendor guidanceAuthoritative vendor guidance changed: added mitigation: github.com/GHSA-w8hw-w9fx-j79w; added remediation: github.com/GHSA-w8hw-w9fx-j79w; removed vendor advisory: github.com/GHSA-w8hw-w9fx-j79w.
    Show before and after
    Before
    vendor advisory: github.com/GHSA-w8hw-w9fx-j79w
    After
    mitigation: github.com/GHSA-w8hw-w9fx-j79w · remediation: github.com/GHSA-w8hw-w9fx-j79w
Open full change history →
CVE-2026-109619RCE via stale global statePHP Group · PHPCVSS 4.0 · 9.2 Critical5 material changes
  1. BlackTree coverageBlackTree article coverage changed from no BlackTree article to 1 BlackTree article.
    Show before and after
    Before
    no BlackTree article
    After
    1 BlackTree article
  2. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    PHP: 8.2.* < 8.2.35, 8.3.* < 8.3.36, 8.4.* < 8.4.27, 8.5.* < 8.5.12 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
    After
    PHP: 8.2.* < 8.2.35, 8.3.* < 8.3.36, 8.4.* < 8.4.27, 8.5.* < 8.5.12 · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
  3. Remediation statusRemediation status changed from Mitigation available to Patch available.
    Show before and after
    Before
    Mitigation available
    After
    Patch available
  4. Remediation statusRemediation status changed from Awaiting fix to Mitigation available.
    Show before and after
    Before
    Awaiting fix
    After
    Mitigation available
  5. Vendor guidanceAuthoritative vendor guidance changed: added mitigation: github.com/GHSA-6wmf-4rv5-p3rp; added remediation: github.com/GHSA-6wmf-4rv5-p3rp; removed vendor advisory: github.com/GHSA-6wmf-4rv5-p3rp.
    Show before and after
    Before
    vendor advisory: github.com/GHSA-6wmf-4rv5-p3rp
    After
    mitigation: github.com/GHSA-6wmf-4rv5-p3rp · remediation: github.com/GHSA-6wmf-4rv5-p3rp
Open full change history →
CVE-2026-67273Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerabilityDell · Container Storage ModulesCVSS 3.1 · 9.6 Critical4 material changes
  1. BlackTree coverageBlackTree article coverage changed from 1 BlackTree article to 1 BlackTree article.
    Show before and after
    Before
    1 BlackTree article
    After
    1 BlackTree article
  2. Remediation statusRemediation status changed from Awaiting fix to Patch available.
    Show before and after
    Before
    Awaiting fix
    After
    Patch available
  3. Vendor guidanceAuthoritative vendor guidance changed: added patch: dell.com/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9; added remediation: dell.com/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9.
    Show before and after
    Before
    no authoritative guidance recorded
    After
    patch: dell.com/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9 · remediation: dell.com/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9
  4. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    Container Storage Modules: < 1.18.0 or later · Fixed: No fixed version is explicitly recorded in the structured CVE data.
    After
    Container Storage Modules: < 1.18.0 or later · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
Open full change history →
CVE-2026-76105Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerabilityDell · Container Storage ModulesCVSS 3.1 · 7.7 High4 material changes
  1. BlackTree coverageBlackTree article coverage changed from 1 BlackTree article to 1 BlackTree article.
    Show before and after
    Before
    1 BlackTree article
    After
    1 BlackTree article
  2. Remediation statusRemediation status changed from Awaiting fix to Patch available.
    Show before and after
    Before
    Awaiting fix
    After
    Patch available
  3. Vendor guidanceAuthoritative vendor guidance changed: added patch: dell.com/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9; added remediation: dell.com/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9.
    Show before and after
    Before
    no authoritative guidance recorded
    After
    patch: dell.com/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9 · remediation: dell.com/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9
  4. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    Container Storage Modules: < 1.18.0 or later · Fixed: No fixed version is explicitly recorded in the structured CVE data.
    After
    Container Storage Modules: < 1.18.0 or later · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
Open full change history →
CVE-2026-76169fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlersfastify · fastifyCVSS 3.1 · 7.5 High4 material changes
  1. BlackTree coverageBlackTree article coverage changed from 1 BlackTree article to 1 BlackTree article.
    Show before and after
    Before
    1 BlackTree article
    After
    1 BlackTree article
  2. Remediation statusRemediation status changed from Mitigation available to Patch available.
    Show before and after
    Before
    Mitigation available
    After
    Patch available
  3. Vendor guidanceAuthoritative vendor guidance changed from remediation: access.redhat.com/CVE-2026-76169 to remediation: access.redhat.com/CVE-2026-76169.
    Show before and after
    Before
    remediation: access.redhat.com/CVE-2026-76169
    After
    remediation: access.redhat.com/CVE-2026-76169
  4. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-core-bff-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-dashboard-operator-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-dashboard-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-agent-ops-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-automl-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-autorag-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-eval-hub-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-gen-ai-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-maas-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-model-registry-rhel9 as a component of Red Hat OpenShift AI (RHOAI); devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces
    After
    rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:3136558fbf67889683a08f72799e16de83f35cfaf5488b0765c38b38234cbab0_ppc64le as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:9b564494b8987084b4c3994dc1ca4c5b8b50c82d917a7e7e51e27853836d9af0_s390x as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:b6612194248e0ee15c9fde18d743f85f5ab5ce848533756a3877423765041e74_arm64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:e5aee3587d14aa72d964bfce95d568b26a45d579b66b58535f5740703ab7351c_amd64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:6e5b350add7c99c656342b98596813338a9adbe83d0e594643677a1b382e2680_ppc64le as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:963ab37925520537e109e391e0fc6d5c54e6ea6b01d8d13e5ab68c41de5832ba_s390x as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:a4466852d74148898536004253ea64ed948cdd134ab9eee0d754346f5ee864e0_amd64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:c3644abd70ee93cfac6c9ca40dea7d0dbe8224f0e30297733e8da656dc4f2afd_arm64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ccfd60d1c87385181f541ad46fc53a6f7b71e4447c766434fa420775189f5405_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:e7d98591de62a3a19e4e7b2338f6dad84339391cba10658bec332a33ffdeae12_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ed1e9e469333c72d2f5f446ab0c69a2383538172b9dad48ca8d4a44ea1858502_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:f6800c291162d9aac66fbfc8e60ef557a5bde639875c0799ffa617042460796c_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:2ea3fa3d3b381431f9717a367e2ba0ccd01554d30e6c8eda8b166f71bc77db69_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:347ed5e1bbb3cf931ae6d418fb5550f4a33a16fd8c0fdc1ed1fb2e3654efb24e_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:3abbe016571b304ac6f3400713a1ff5261e8d4d6223a4e6e20b987a442c346e4_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:93239529dd6854c6b03a9ded073fa6d1f07eb7377b56bf466669ab539919e48d_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:72b8f8d8a63c0664a729ec7afbfaa3e9ddb41d299253ed110b7358a91f55d144_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:86616fad00eb8599e86dd42ea34cb86fa247c8e7eddcafb5ab632f194ceb52bf_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:924d9f03ce88b5886ceb1e24d7ce592a82f9ee7c036c2b5a1d5597a8be53a66c_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:de36d69097a2f9cd6125a983943aa1218278d06e79ce030ceab1b092cc7510a6_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:089fe5dafed71be64d1f3e72fc24658bceb6ace0b76ecb8ac01b7bdee6aa92de_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:342ab0dbd96bac15f0ff048b8b1ae6e5ac3840628b0f2ee35ece8289a9d91d8b_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:5dac4fa96da25962ebf8bf00f7b0e2d36fa3229ca5a4826ef8dcd560b4074187_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:9b9a62a5184755cbb14a206903eabfe4933bd1811e6120d27126f700d1c17d74_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:01df73aac063e1e5032d8a752cb85db990084ad5ef370b18dc8a636c5d9030da_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:2145f5bd9cfde6a2b4e26e684f8107485e5e9b06a4370b7af9d8e93dd1e88398_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:b12d8247d21c8c862e5f4824145e4a6ac90ab73ce149d5ef7b1eb1d1f34b9def_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:bc91daf778c7f4137045c4c37cd704ec6c27da97dd347f581cc0710bc0c136d3_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:2f670c1c6378c7fd259a3cffd4dee8c837afa40366aa192641c20a58cc5d70d4_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:34954fc242ca5a0d736d90f8cba4d4383f41058a966717cfdc25d378cf92c064_amd64 as a component of Red Hat OpenShift AI 3.4; and 54 more
Open full change history →
CVE-2026-84428fastify vulnerable to header validation bypass via incomplete schema case normalizationfastify · fastifyCVSS 3.1 · 7.5 High4 material changes
  1. BlackTree coverageBlackTree article coverage changed from 1 BlackTree article to 1 BlackTree article.
    Show before and after
    Before
    1 BlackTree article
    After
    1 BlackTree article
  2. Remediation statusRemediation status changed from Mitigation available to Patch available.
    Show before and after
    Before
    Mitigation available
    After
    Patch available
  3. Vendor guidanceAuthoritative vendor guidance changed from remediation: access.redhat.com/CVE-2026-84428 to remediation: access.redhat.com/CVE-2026-84428.
    Show before and after
    Before
    remediation: access.redhat.com/CVE-2026-84428
    After
    remediation: access.redhat.com/CVE-2026-84428
  4. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-core-bff-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-dashboard-operator-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-dashboard-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-agent-ops-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-automl-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-autorag-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-eval-hub-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-gen-ai-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-maas-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-model-registry-rhel9 as a component of Red Hat OpenShift AI (RHOAI); devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces
    After
    rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:3136558fbf67889683a08f72799e16de83f35cfaf5488b0765c38b38234cbab0_ppc64le as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:9b564494b8987084b4c3994dc1ca4c5b8b50c82d917a7e7e51e27853836d9af0_s390x as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:b6612194248e0ee15c9fde18d743f85f5ab5ce848533756a3877423765041e74_arm64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:e5aee3587d14aa72d964bfce95d568b26a45d579b66b58535f5740703ab7351c_amd64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:6e5b350add7c99c656342b98596813338a9adbe83d0e594643677a1b382e2680_ppc64le as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:963ab37925520537e109e391e0fc6d5c54e6ea6b01d8d13e5ab68c41de5832ba_s390x as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:a4466852d74148898536004253ea64ed948cdd134ab9eee0d754346f5ee864e0_amd64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:c3644abd70ee93cfac6c9ca40dea7d0dbe8224f0e30297733e8da656dc4f2afd_arm64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ccfd60d1c87385181f541ad46fc53a6f7b71e4447c766434fa420775189f5405_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:e7d98591de62a3a19e4e7b2338f6dad84339391cba10658bec332a33ffdeae12_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ed1e9e469333c72d2f5f446ab0c69a2383538172b9dad48ca8d4a44ea1858502_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:f6800c291162d9aac66fbfc8e60ef557a5bde639875c0799ffa617042460796c_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:2ea3fa3d3b381431f9717a367e2ba0ccd01554d30e6c8eda8b166f71bc77db69_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:347ed5e1bbb3cf931ae6d418fb5550f4a33a16fd8c0fdc1ed1fb2e3654efb24e_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:3abbe016571b304ac6f3400713a1ff5261e8d4d6223a4e6e20b987a442c346e4_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:93239529dd6854c6b03a9ded073fa6d1f07eb7377b56bf466669ab539919e48d_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:72b8f8d8a63c0664a729ec7afbfaa3e9ddb41d299253ed110b7358a91f55d144_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:86616fad00eb8599e86dd42ea34cb86fa247c8e7eddcafb5ab632f194ceb52bf_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:924d9f03ce88b5886ceb1e24d7ce592a82f9ee7c036c2b5a1d5597a8be53a66c_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:de36d69097a2f9cd6125a983943aa1218278d06e79ce030ceab1b092cc7510a6_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:089fe5dafed71be64d1f3e72fc24658bceb6ace0b76ecb8ac01b7bdee6aa92de_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:342ab0dbd96bac15f0ff048b8b1ae6e5ac3840628b0f2ee35ece8289a9d91d8b_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:5dac4fa96da25962ebf8bf00f7b0e2d36fa3229ca5a4826ef8dcd560b4074187_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:9b9a62a5184755cbb14a206903eabfe4933bd1811e6120d27126f700d1c17d74_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:01df73aac063e1e5032d8a752cb85db990084ad5ef370b18dc8a636c5d9030da_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:2145f5bd9cfde6a2b4e26e684f8107485e5e9b06a4370b7af9d8e93dd1e88398_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:b12d8247d21c8c862e5f4824145e4a6ac90ab73ce149d5ef7b1eb1d1f34b9def_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:bc91daf778c7f4137045c4c37cd704ec6c27da97dd347f581cc0710bc0c136d3_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:2f670c1c6378c7fd259a3cffd4dee8c837afa40366aa192641c20a58cc5d70d4_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:34954fc242ca5a0d736d90f8cba4d4383f41058a966717cfdc25d378cf92c064_amd64 as a component of Red Hat OpenShift AI 3.4; and 54 more
Open full change history →
CVE-2026-84469fastify vulnerable to request validation bypass via skipped boolean false schemasfastify · fastifyCVSS 3.1 · 7.5 High4 material changes
  1. BlackTree coverageBlackTree article coverage changed from 1 BlackTree article to 1 BlackTree article.
    Show before and after
    Before
    1 BlackTree article
    After
    1 BlackTree article
  2. Remediation statusRemediation status changed from Mitigation available to Patch available.
    Show before and after
    Before
    Mitigation available
    After
    Patch available
  3. Vendor guidanceAuthoritative vendor guidance changed from remediation: access.redhat.com/CVE-2026-84469 to remediation: access.redhat.com/CVE-2026-84469.
    Show before and after
    Before
    remediation: access.redhat.com/CVE-2026-84469
    After
    remediation: access.redhat.com/CVE-2026-84469
  4. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-core-bff-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-dashboard-operator-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-dashboard-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-agent-ops-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-automl-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-autorag-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-eval-hub-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-gen-ai-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-maas-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-model-registry-rhel9 as a component of Red Hat OpenShift AI (RHOAI); devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces
    After
    rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:3136558fbf67889683a08f72799e16de83f35cfaf5488b0765c38b38234cbab0_ppc64le as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:9b564494b8987084b4c3994dc1ca4c5b8b50c82d917a7e7e51e27853836d9af0_s390x as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:b6612194248e0ee15c9fde18d743f85f5ab5ce848533756a3877423765041e74_arm64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:e5aee3587d14aa72d964bfce95d568b26a45d579b66b58535f5740703ab7351c_amd64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:6e5b350add7c99c656342b98596813338a9adbe83d0e594643677a1b382e2680_ppc64le as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:963ab37925520537e109e391e0fc6d5c54e6ea6b01d8d13e5ab68c41de5832ba_s390x as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:a4466852d74148898536004253ea64ed948cdd134ab9eee0d754346f5ee864e0_amd64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:c3644abd70ee93cfac6c9ca40dea7d0dbe8224f0e30297733e8da656dc4f2afd_arm64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ccfd60d1c87385181f541ad46fc53a6f7b71e4447c766434fa420775189f5405_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:e7d98591de62a3a19e4e7b2338f6dad84339391cba10658bec332a33ffdeae12_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ed1e9e469333c72d2f5f446ab0c69a2383538172b9dad48ca8d4a44ea1858502_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:f6800c291162d9aac66fbfc8e60ef557a5bde639875c0799ffa617042460796c_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:2ea3fa3d3b381431f9717a367e2ba0ccd01554d30e6c8eda8b166f71bc77db69_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:347ed5e1bbb3cf931ae6d418fb5550f4a33a16fd8c0fdc1ed1fb2e3654efb24e_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:3abbe016571b304ac6f3400713a1ff5261e8d4d6223a4e6e20b987a442c346e4_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:93239529dd6854c6b03a9ded073fa6d1f07eb7377b56bf466669ab539919e48d_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:72b8f8d8a63c0664a729ec7afbfaa3e9ddb41d299253ed110b7358a91f55d144_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:86616fad00eb8599e86dd42ea34cb86fa247c8e7eddcafb5ab632f194ceb52bf_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:924d9f03ce88b5886ceb1e24d7ce592a82f9ee7c036c2b5a1d5597a8be53a66c_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:de36d69097a2f9cd6125a983943aa1218278d06e79ce030ceab1b092cc7510a6_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:089fe5dafed71be64d1f3e72fc24658bceb6ace0b76ecb8ac01b7bdee6aa92de_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:342ab0dbd96bac15f0ff048b8b1ae6e5ac3840628b0f2ee35ece8289a9d91d8b_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:5dac4fa96da25962ebf8bf00f7b0e2d36fa3229ca5a4826ef8dcd560b4074187_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:9b9a62a5184755cbb14a206903eabfe4933bd1811e6120d27126f700d1c17d74_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:01df73aac063e1e5032d8a752cb85db990084ad5ef370b18dc8a636c5d9030da_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:2145f5bd9cfde6a2b4e26e684f8107485e5e9b06a4370b7af9d8e93dd1e88398_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:b12d8247d21c8c862e5f4824145e4a6ac90ab73ce149d5ef7b1eb1d1f34b9def_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:bc91daf778c7f4137045c4c37cd704ec6c27da97dd347f581cc0710bc0c136d3_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:2f670c1c6378c7fd259a3cffd4dee8c837afa40366aa192641c20a58cc5d70d4_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:34954fc242ca5a0d736d90f8cba4d4383f41058a966717cfdc25d378cf92c064_amd64 as a component of Red Hat OpenShift AI 3.4; and 54 more
Open full change history →
CVE-2026-84504fastify vulnerable to request body replacement via an async validation result collisionfastify · fastifyCVSS 3.1 · 8.1 High4 material changes
  1. BlackTree coverageBlackTree article coverage changed from 1 BlackTree article to 1 BlackTree article.
    Show before and after
    Before
    1 BlackTree article
    After
    1 BlackTree article
  2. Remediation statusRemediation status changed from Mitigation available to Patch available.
    Show before and after
    Before
    Mitigation available
    After
    Patch available
  3. Vendor guidanceAuthoritative vendor guidance changed from remediation: access.redhat.com/CVE-2026-84504 to remediation: access.redhat.com/CVE-2026-84504.
    Show before and after
    Before
    remediation: access.redhat.com/CVE-2026-84504
    After
    remediation: access.redhat.com/CVE-2026-84504
  4. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-core-bff-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-dashboard-operator-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-dashboard-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-agent-ops-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-automl-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-autorag-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-eval-hub-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-gen-ai-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-maas-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mod-arch-model-registry-rhel9 as a component of Red Hat OpenShift AI (RHOAI); devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces
    After
    rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces · Fixed: registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:3136558fbf67889683a08f72799e16de83f35cfaf5488b0765c38b38234cbab0_ppc64le as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:9b564494b8987084b4c3994dc1ca4c5b8b50c82d917a7e7e51e27853836d9af0_s390x as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:b6612194248e0ee15c9fde18d743f85f5ab5ce848533756a3877423765041e74_arm64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:e5aee3587d14aa72d964bfce95d568b26a45d579b66b58535f5740703ab7351c_amd64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:6e5b350add7c99c656342b98596813338a9adbe83d0e594643677a1b382e2680_ppc64le as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:963ab37925520537e109e391e0fc6d5c54e6ea6b01d8d13e5ab68c41de5832ba_s390x as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:a4466852d74148898536004253ea64ed948cdd134ab9eee0d754346f5ee864e0_amd64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:c3644abd70ee93cfac6c9ca40dea7d0dbe8224f0e30297733e8da656dc4f2afd_arm64 as a component of Red Hat OpenShift AI 2.25; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ccfd60d1c87385181f541ad46fc53a6f7b71e4447c766434fa420775189f5405_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:e7d98591de62a3a19e4e7b2338f6dad84339391cba10658bec332a33ffdeae12_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:ed1e9e469333c72d2f5f446ab0c69a2383538172b9dad48ca8d4a44ea1858502_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:f6800c291162d9aac66fbfc8e60ef557a5bde639875c0799ffa617042460796c_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:2ea3fa3d3b381431f9717a367e2ba0ccd01554d30e6c8eda8b166f71bc77db69_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:347ed5e1bbb3cf931ae6d418fb5550f4a33a16fd8c0fdc1ed1fb2e3654efb24e_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:3abbe016571b304ac6f3400713a1ff5261e8d4d6223a4e6e20b987a442c346e4_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:93239529dd6854c6b03a9ded073fa6d1f07eb7377b56bf466669ab539919e48d_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:72b8f8d8a63c0664a729ec7afbfaa3e9ddb41d299253ed110b7358a91f55d144_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:86616fad00eb8599e86dd42ea34cb86fa247c8e7eddcafb5ab632f194ceb52bf_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:924d9f03ce88b5886ceb1e24d7ce592a82f9ee7c036c2b5a1d5597a8be53a66c_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-autorag-rhel9@sha256:de36d69097a2f9cd6125a983943aa1218278d06e79ce030ceab1b092cc7510a6_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:089fe5dafed71be64d1f3e72fc24658bceb6ace0b76ecb8ac01b7bdee6aa92de_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:342ab0dbd96bac15f0ff048b8b1ae6e5ac3840628b0f2ee35ece8289a9d91d8b_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:5dac4fa96da25962ebf8bf00f7b0e2d36fa3229ca5a4826ef8dcd560b4074187_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-eval-hub-rhel9@sha256:9b9a62a5184755cbb14a206903eabfe4933bd1811e6120d27126f700d1c17d74_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:01df73aac063e1e5032d8a752cb85db990084ad5ef370b18dc8a636c5d9030da_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:2145f5bd9cfde6a2b4e26e684f8107485e5e9b06a4370b7af9d8e93dd1e88398_ppc64le as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:b12d8247d21c8c862e5f4824145e4a6ac90ab73ce149d5ef7b1eb1d1f34b9def_amd64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-gen-ai-rhel9@sha256:bc91daf778c7f4137045c4c37cd704ec6c27da97dd347f581cc0710bc0c136d3_arm64 as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:2f670c1c6378c7fd259a3cffd4dee8c837afa40366aa192641c20a58cc5d70d4_s390x as a component of Red Hat OpenShift AI 3.4; registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:34954fc242ca5a0d736d90f8cba4d4383f41058a966717cfdc25d378cf92c064_amd64 as a component of Red Hat OpenShift AI 3.4; and 54 more
Open full change history →
CVE-2026-96889Librsvg: use-after-free when xml includes have duplicated entitiesRed Hat · Red Hat Enterprise Linux 10CVSS 3.1 · 7.8 High10 material changes
  1. BlackTree coverageBlackTree article coverage changed from no BlackTree article to 1 BlackTree article.
    Show before and after
    Before
    no BlackTree article
    After
    1 BlackTree article
  2. Remediation statusRemediation status changed from Awaiting fix to Patch available.
    Show before and after
    Before
    Awaiting fix
    After
    Patch available
  3. Vendor guidanceAuthoritative vendor guidance changed from remediation: suse.com/CVE-2026-96889 to remediation: suse.com/CVE-2026-96889.
    Show before and after
    Before
    remediation: suse.com/CVE-2026-96889
    After
    remediation: suse.com/CVE-2026-96889
  4. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    gdk-pixbuf-loader-rsvg as component of SUSE Linux Enterprise Desktop 15 SP7; librsvg as component of SUSE Linux Enterprise Desktop 15 SP7; librsvg-2-2 as component of SUSE Linux Enterprise Desktop 15 SP7; librsvg-devel as component of SUSE Linux Enterprise Desktop 15 SP7; typelib-1_0-Rsvg-2_0 as component of SUSE Linux Enterprise Desktop 15 SP7; gdk-pixbuf-loader-rsvg as component of SUSE Linux Enterprise High Performance Computing 12 SP5; librsvg as component of SUSE Linux Enterprise High Performance Computing 12 SP5; librsvg-2-2 as component of SUSE Linux Enterprise High Performance Computing 12 SP5; librsvg-2-2-32bit as component of SUSE Linux Enterprise High Performance Computing 12 SP5; librsvg-devel as component of SUSE Linux Enterprise High Performance Computing 12 SP5; rsvg-view as component of SUSE Linux Enterprise High Performance Computing 12 SP5; gdk-pixbuf-loader-rsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP1; librsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP1; librsvg-2-2 as component of SUSE Linux Enterprise High Performance Computing 15 SP1; librsvg-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP1; typelib-1_0-Rsvg-2_0 as component of SUSE Linux Enterprise High Performance Computing 15 SP1; gdk-pixbuf-loader-rsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP2; librsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP2; librsvg-2-2 as component of SUSE Linux Enterprise High Performance Computing 15 SP2; librsvg-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP2; typelib-1_0-Rsvg-2_0 as component of SUSE Linux Enterprise High Performance Computing 15 SP2; gdk-pixbuf-loader-rsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP3; librsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP3; librsvg-2-2 as component of SUSE Linux Enterprise High Performance Computing 15 SP3; librsvg-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP3; typelib-1_0-Rsvg-2_0 as component of SUSE Linux Enterprise High Performance Computing 15 SP3; gdk-pixbuf-loader-rsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS; librsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS; librsvg-2-2 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS; librsvg-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS; and 195 more
    After
    gdk-pixbuf-loader-rsvg as component of SUSE Linux Enterprise Desktop 15 SP7; librsvg as component of SUSE Linux Enterprise Desktop 15 SP7; librsvg-2-2 as component of SUSE Linux Enterprise Desktop 15 SP7; librsvg-devel as component of SUSE Linux Enterprise Desktop 15 SP7; typelib-1_0-Rsvg-2_0 as component of SUSE Linux Enterprise Desktop 15 SP7; gdk-pixbuf-loader-rsvg as component of SUSE Linux Enterprise High Performance Computing 12 SP5; librsvg as component of SUSE Linux Enterprise High Performance Computing 12 SP5; librsvg-2-2 as component of SUSE Linux Enterprise High Performance Computing 12 SP5; librsvg-2-2-32bit as component of SUSE Linux Enterprise High Performance Computing 12 SP5; librsvg-devel as component of SUSE Linux Enterprise High Performance Computing 12 SP5; rsvg-view as component of SUSE Linux Enterprise High Performance Computing 12 SP5; gdk-pixbuf-loader-rsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP1; librsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP1; librsvg-2-2 as component of SUSE Linux Enterprise High Performance Computing 15 SP1; librsvg-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP1; typelib-1_0-Rsvg-2_0 as component of SUSE Linux Enterprise High Performance Computing 15 SP1; gdk-pixbuf-loader-rsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP2; librsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP2; librsvg-2-2 as component of SUSE Linux Enterprise High Performance Computing 15 SP2; librsvg-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP2; typelib-1_0-Rsvg-2_0 as component of SUSE Linux Enterprise High Performance Computing 15 SP2; gdk-pixbuf-loader-rsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP3; librsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP3; librsvg-2-2 as component of SUSE Linux Enterprise High Performance Computing 15 SP3; librsvg-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP3; typelib-1_0-Rsvg-2_0 as component of SUSE Linux Enterprise High Performance Computing 15 SP3; gdk-pixbuf-loader-rsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS; librsvg as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS; librsvg-2-2 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS; librsvg-devel as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS; and 196 more
  5. Remediation statusRemediation status changed from Mitigation available to Patch available.
    Show before and after
    Before
    Mitigation available
    After
    Patch available
  6. Vendor guidanceAuthoritative vendor guidance changed from remediation: access.redhat.com/CVE-2026-96889 to remediation: access.redhat.com/CVE-2026-96889.
    Show before and after
    Before
    remediation: access.redhat.com/CVE-2026-96889
    After
    remediation: access.redhat.com/CVE-2026-96889
  7. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    glycin-loaders.src as a component of Red Hat Enterprise Linux 10; librsvg2-devel as a component of Red Hat Enterprise Linux 10; librsvg2-tools as a component of Red Hat Enterprise Linux 10; librsvg2.src as a component of Red Hat Enterprise Linux 10; rsvg-pixbuf-loader as a component of Red Hat Enterprise Linux 10; librsvg2 as a component of Red Hat Enterprise Linux 6; librsvg2-devel as a component of Red Hat Enterprise Linux 6; librsvg2.src as a component of Red Hat Enterprise Linux 6; librsvg2 as a component of Red Hat Enterprise Linux 7; librsvg2-devel as a component of Red Hat Enterprise Linux 7; librsvg2-tools as a component of Red Hat Enterprise Linux 7; librsvg2.src as a component of Red Hat Enterprise Linux 7; librsvg2 as a component of Red Hat Enterprise Linux 8; librsvg2-devel as a component of Red Hat Enterprise Linux 8; librsvg2-tools as a component of Red Hat Enterprise Linux 8; librsvg2.src as a component of Red Hat Enterprise Linux 8; librsvg2 as a component of Red Hat Enterprise Linux 9; librsvg2-devel as a component of Red Hat Enterprise Linux 9; librsvg2-tools as a component of Red Hat Enterprise Linux 9; librsvg2.src as a component of Red Hat Enterprise Linux 9
    After
    librsvg2 as a component of Red Hat Enterprise Linux 6; librsvg2-devel as a component of Red Hat Enterprise Linux 6; librsvg2.src as a component of Red Hat Enterprise Linux 6; librsvg2 as a component of Red Hat Enterprise Linux 7; librsvg2-devel as a component of Red Hat Enterprise Linux 7; librsvg2-tools as a component of Red Hat Enterprise Linux 7; librsvg2.src as a component of Red Hat Enterprise Linux 7 · Fixed: glycin-loaders-0:1.0.1-1.el10_2.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glycin-loaders-0:1.0.1-1.el10_2.2.src as a component of Red Hat Enterprise Linux AppStream (v. 10); glycin-loaders-0:1.0.1-1.el10_2.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glycin-loaders-debuginfo-0:1.0.1-1.el10_2.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glycin-loaders-debuginfo-0:1.0.1-1.el10_2.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glycin-loaders-debugsource-0:1.0.1-1.el10_2.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glycin-loaders-debugsource-0:1.0.1-1.el10_2.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-0:2.57.1-9.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-0:2.57.1-9.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-0:2.57.1-9.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-0:2.57.1-9.el10_2.10.src as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-0:2.57.1-9.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-debuginfo-0:2.57.1-9.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-debuginfo-0:2.57.1-9.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-debuginfo-0:2.57.1-9.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-debuginfo-0:2.57.1-9.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-debugsource-0:2.57.1-9.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-debugsource-0:2.57.1-9.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-debugsource-0:2.57.1-9.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-debugsource-0:2.57.1-9.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-devel-0:2.57.1-9.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-devel-0:2.57.1-9.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-devel-0:2.57.1-9.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-devel-0:2.57.1-9.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-tools-0:2.57.1-9.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-tools-0:2.57.1-9.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-tools-0:2.57.1-9.el10_2.10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-tools-0:2.57.1-9.el10_2.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-tools-debuginfo-0:2.57.1-9.el10_2.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); librsvg2-tools-debuginfo-0:2.57.1-9.el10_2.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); and 70 more
  8. Vendor guidanceAuthoritative vendor guidance changed: removed vendor advisory: access.redhat.com/RHSA-2026:86331; removed vendor advisory: access.redhat.com/RHSA-2026:86841; 2 further removals.
    Show before and after
    Before
    remediation: access.redhat.com/RHSA-2026:86331 · vendor advisory: access.redhat.com/RHSA-2026:86331 · vendor advisory: access.redhat.com/RHSA-2026:86841 · 2 more references
    After
    remediation: access.redhat.com/RHSA-2026:86331
  9. Vendor guidanceAuthoritative vendor guidance changed: added vendor advisory: access.redhat.com/RHSA-2026:86921.
    Show before and after
    Before
    remediation: access.redhat.com/RHSA-2026:86331 · vendor advisory: access.redhat.com/RHSA-2026:86331 · vendor advisory: access.redhat.com/RHSA-2026:86841 · 1 more references
    After
    remediation: access.redhat.com/RHSA-2026:86331 · vendor advisory: access.redhat.com/RHSA-2026:86331 · vendor advisory: access.redhat.com/RHSA-2026:86841 · 2 more references
  10. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    See the vendor and CVE records for the affected range. · Fixed: Red Hat Enterprise Linux 10: 0:1.0.1-1.el10_2.2 < *, 0:2.57.1-9.el10_2.10 < *; Red Hat Enterprise Linux 8: 0:2.42.7-6.el8_10 < *
    After
    See the vendor and CVE records for the affected range. · Fixed: Red Hat Enterprise Linux 10: 0:1.0.1-1.el10_2.2 < *, 0:2.57.1-9.el10_2.10 < *; Red Hat Enterprise Linux 8: 0:2.42.7-6.el8_10 < *; Red Hat Enterprise Linux 9: 0:2.50.7-3.el9_8.1 < *
Open full change history →
CVE-2026-87817GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonationgitpython-developers · GitPythonCVSS 4.0 · 8.7 High2 material changes
  1. BlackTree coverageBlackTree article coverage changed from 1 BlackTree article to 1 BlackTree article.
    Show before and after
    Before
    1 BlackTree article
    After
    1 BlackTree article
  2. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; ansible-automation-platform-24/controller-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/hub-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/hub-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-27/hub-rhel9 as a component of Red Hat Ansible Automation Platform 2; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-feature-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th-torch-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th-torch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th-torch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-rocm64-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-training-cuda128-torch29-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); and 15 more · Fixed: automation-controller-venv-tower-0:4.6.33-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; automation-controller-venv-tower-0:4.6.33-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; automation-controller-venv-tower-0:4.6.33-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; automation-controller-venv-tower-0:4.6.33-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-gitpython-0:3.1.60-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-gitpython-0:3.1.60-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python-gitpython-0:3.1.62-1.el8pc.src as a component of Red Hat Satellite 6.16 for RHEL 8; python3.11-gitpython-0:3.1.62-1.el8pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 8; automation-controller-venv-tower-0:4.6.33-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9; automation-controller-venv-tower-0:4.6.33-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9; automation-controller-venv-tower-0:4.6.33-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9; automation-controller-venv-tower-0:4.6.33-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9; python3.12-gitpython-0:3.1.60-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9; python3.12-gitpython-0:3.1.60-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9; automation-controller-venv-tower-0:4.7.17-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9; automation-controller-venv-tower-0:4.7.17-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9; automation-controller-venv-tower-0:4.7.17-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9; automation-controller-venv-tower-0:4.7.17-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9; python3.12-gitpython-0:3.1.60-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9; python3.12-gitpython-0:3.1.60-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9; python-gitpython-0:3.1.62-1.el9pc.src as a component of Red Hat Satellite 6.16 for RHEL 9; python3.11-gitpython-0:3.1.62-1.el9pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 9; python-gitpython-0:3.1.62-1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9; python3.11-gitpython-0:3.1.62-1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9; python3.12-gitpython-0:3.1.62-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9; python3.12-gitpython-0:3.1.62-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9; python3.12-gitpython-0:3.1.62-1.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9; python3.12-gitpython-0:3.1.62-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9; registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:0b9fbc7c08c52c1ff9bb444896b26e675ab2451fe83476e676c77c27e3bdf4be_s390x as a component of Red Hat Ansible Automation Platform 2.5; registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:3857cc4676afc5c9abed5951bc3d5a65bc64080521d6e6158ed0fb65b4e57cf8_ppc64le as a component of Red Hat Ansible Automation Platform 2.5; and 12 more
    After
    exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; ansible-automation-platform-24/controller-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/hub-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-26/hub-rhel9 as a component of Red Hat Ansible Automation Platform 2; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhosp-rhel8/openstack-mistral-api as a component of Red Hat OpenStack Platform 16.2; rhosp-rhel8/openstack-mistral-base as a component of Red Hat OpenStack Platform 16.2; rhosp-rhel8/openstack-mistral-engine as a component of Red Hat OpenStack Platform 16.2; rhosp-rhel8/openstack-mistral-event-engine as a component of Red Hat OpenStack Platform 16.2; rhosp-rhel8/openstack-mistral-executor as a component of Red Hat OpenStack Platform 16.2; rhosp-rhel8/openstack-nova-scheduler as a component of Red Hat OpenStack Platform 16.2; rhosp-rhel8/openstack-tripleoclient as a component of Red Hat OpenStack Platform 16.2 · Fixed: automation-controller-venv-tower-0:4.6.33-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; automation-controller-venv-tower-0:4.6.33-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; automation-controller-venv-tower-0:4.6.33-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; automation-controller-venv-tower-0:4.6.33-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-gitpython-0:3.1.60-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python3.12-gitpython-0:3.1.60-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8; python-gitpython-0:3.1.62-1.el8pc.src as a component of Red Hat Satellite 6.16 for RHEL 8; python3.11-gitpython-0:3.1.62-1.el8pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 8; automation-controller-venv-tower-0:4.6.33-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9; automation-controller-venv-tower-0:4.6.33-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9; automation-controller-venv-tower-0:4.6.33-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9; automation-controller-venv-tower-0:4.6.33-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9; python3.12-gitpython-0:3.1.60-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9; python3.12-gitpython-0:3.1.60-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9; automation-controller-venv-tower-0:4.7.17-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9; automation-controller-venv-tower-0:4.7.17-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9; automation-controller-venv-tower-0:4.7.17-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9; automation-controller-venv-tower-0:4.7.17-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9; python3.12-gitpython-0:3.1.60-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9; python3.12-gitpython-0:3.1.60-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9; python-gitpython-0:3.1.62-1.el9pc.src as a component of Red Hat Satellite 6.16 for RHEL 9; python3.11-gitpython-0:3.1.62-1.el9pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 9; python-gitpython-0:3.1.62-1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9; python3.11-gitpython-0:3.1.62-1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9; python3.12-gitpython-0:3.1.62-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9; python3.12-gitpython-0:3.1.62-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9; python3.12-gitpython-0:3.1.62-1.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9; python3.12-gitpython-0:3.1.62-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9; registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:0b9fbc7c08c52c1ff9bb444896b26e675ab2451fe83476e676c77c27e3bdf4be_s390x as a component of Red Hat Ansible Automation Platform 2.5; registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:3857cc4676afc5c9abed5951bc3d5a65bc64080521d6e6158ed0fb65b4e57cf8_ppc64le as a component of Red Hat Ansible Automation Platform 2.5; and 71 more
Open full change history →
CVE-2026-96355Webform - Critical - Remote Code Execution - SA-CONTRIB-2026-175Drupal · WebformCVSS unscored3 material changes
  1. BlackTree coverageBlackTree article coverage changed from 1 BlackTree article to 1 BlackTree article.
    Show before and after
    Before
    1 BlackTree article
    After
    1 BlackTree article
  2. Vendor guidanceAuthoritative vendor guidance changed: removed remediation: wid.cert-bund.de/securityadvisory?name=WID-SEC-2026-3554.
    Show before and after
    Before
    remediation: wid.cert-bund.de/securityadvisory?name=WID-SEC-2026-3554
    After
    no authoritative guidance recorded
  3. Affected versionsThe structured affected or fixed version information changed.
    Show before and after
    Before
    Open Source Drupal Project Browser <2.0.3; Open Source Drupal AI CKEditor <1.4.3; Open Source Drupal Cloud <7.0.1; Open Source Drupal Webform REST <4.2.1; Open Source Drupal Editoria11y Accessibility Checker <3.0.9; Open Source Drupal Editoria11y Accessibility Checker <2.2.23; Open Source Drupal Project Browser <2.1.5; Open Source Drupal Mermaid Diagram Field <1.0.9; Open Source Drupal Smart Content <3.2.1; Open Source Drupal Commerce Decoupled Checkout <1.8.0; Open Source Drupal CSS Usage Analyzer <1.0.2; Open Source Drupal Combined image style <1.0.7; Open Source Drupal Tawk.to-Live chat application <3.0.4; Open Source Drupal Webform <6.3.1; Open Source Drupal Stop administrator login <1.6; Open Source Drupal Webform <6.2.12; Open Source Drupal REST & JSON API Authentication <3.2.0; Open Source Drupal CookieCuttr <2.0.3; Open Source Drupal Diba carousel slider <3.0.2 · Fixed: No fixed version is explicitly recorded in this authority advisory.
    After
    Webform: 0.0.0 < 6.2.12, 6.3.0 < 6.3.1 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
Open full change history →
CVE-2026-101891WatchGuard AP Improper Access Control in API Service Allows Unauthenticated AccessWatchGuard · WatchGuard APCVSS 4.0 · 9.3 Critical1 material change
CVE-2026-101954Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabledJuniper Networks · Junos OSCVSS 4.0 · 9.3 Critical1 material change
CVE-2026-101982Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is usedJuniper Networks · Junos OSCVSS 4.0 · 9.3 Critical1 material change
CVE-2026-101983Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configuredJuniper Networks · Junos OSCVSS 4.0 · 9.3 Critical1 material change
CVE-2026-101986Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI executionJuniper Networks · Junos OSCVSS 4.0 · 9.3 Critical1 material change
CVE-2026-101990Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertisedJuniper Networks · Junos OSCVSS 4.0 · 9.3 Critical1 material change
CVE-2026-102175Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is usedJuniper Networks · Junos OSCVSS 4.0 · 9.3 Critical1 material change
CVE-2026-102178Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromiseJuniper Networks · Junos OSCVSS 4.0 · 9.3 Critical1 material change
CVE-2026-102489Zammad GmbH Zammad Session Fixation VulnerabilityZammad GmbH · ZammadCVSS 4.0 · 8.7 High1 material change
CVE-2026-102490Zammad GmbH Zammad Improper Privilege Management VulnerabilityZammad GmbH · ZammadCVSS 4.0 · 8.5 High1 material change
CVE-2026-103004next.js cache leak on warm `use cache` handlers accessing root paramvercel · next.jsCVSS 4.0 · 6.3 Medium1 material change
CVE-2026-104286Fortinet FortiMail Path Traversal VulnerabilityFortinet · FortiMailCVSS 3.1 · 9.8 Critical1 material change
CVE-2026-108099Drupal Core, Gin Admin Theme und Entity List: Mehrere SchwachstellenBSI · Drupal Core, Gin Admin Theme und Entity List: Mehrere SchwachstellenCVSS unscored1 material change
CVE-2026-28324SolarWinds Observability Self-Hosted Remote Code Execution VulnerabilitySolarWinds · Observability Self-HostedCVSS 3.1 · 9.8 Critical1 material change
CVE-2026-28325SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution VulnerabilitySolarWinds · Observability Self-HostedCVSS 3.1 · 8.8 High1 material change
CVE-2026-33789Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of serviceJuniper Networks · Junos OSCVSS 4.0 · 9.2 Critical1 material change
CVE-2026-33796Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabledJuniper Networks · Junos OSCVSS 4.0 · 9.3 Critical1 material change