{"id":"CVE-2021-23425","aliases":["EUVD-2021-1960","GHSA-38fc-wpqx-33j7","RHSA-2022:4711"],"status":"published","title":"Regular Expression Denial of Service (ReDoS)","description":"All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.01927,"percentile":0.8027,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2021-08-18T16:15:11Z","modified":"2026-10-24T10:31:06Z","fixes":[{"ecosystem":"npm","package":"trim-off-newlines","fixed_in":["1.0.3"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"trim-off-newlines","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3"}]}]},{"source":"osv","ecosystem":"npm","package":"trim-off-newlines","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.0.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-ui-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-web-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-2.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-dbscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-health-check-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-restapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-cinderlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-imageio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-ovirt-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-ovirt-engine-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-vmconsole-proxy-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-tools-backup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-vmconsole-proxy-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-webadmin-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"python3-ovirt-engine-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"rhvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0.7-0.9.el8ev"}]}],"bundled":6}],"products":[{"vendor":"trim-off-newlines_project","product":"trim-off-newlines"}],"references":[{"url":"https://snyk.io/vuln/SNYK-JS-TRIMOFFNEWLINES-1296850","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web","article"]},{"url":"https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1567197","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web"]},{"url":"https://github.com/stevemao/trim-off-newlines/blob/master/index.js%23L6","tags":["x_refsource_MISC","x_transferred","Broken Link","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23425","tags":["advisory"]},{"url":"https://github.com/stevemao/trim-off-newlines/pull/3","tags":["web"]},{"url":"https://github.com/advisories/GHSA-38fc-wpqx-33j7"},{"url":"https://github.com/stevemao/trim-off-newlines","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2022:4711","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html-single/technical_notes","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=655153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=977778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1648985","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1781241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1782056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1849169","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1878930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1922977","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1926625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927985","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1971622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986726","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1987121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1988496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990462","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991240","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1999698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2002283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2003883","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2003996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2007384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2007557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2008798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010203","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2013928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015796","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2019144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2019148","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2019153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2023250","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2023786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024202","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2025936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030663","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2035051","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2043146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050566","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2051857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2054756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059877","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2065052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2070156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2071468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072646","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075352","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4711.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3807","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3807","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3807","tags":["advisory"]},{"url":"https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23425","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23425","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33502","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33502","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33502","tags":["advisory"]},{"url":"https://snyk.io/vuln/SNYK-JS-NORMALIZEURL-1296539","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41182","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41182","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41182","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41183","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41183","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41183","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41184","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41184","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41184","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-23425","title":"Regular Expression Denial of Service (ReDoS)","description":"All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.","status":"published","published":"2021-08-18T16:15:11.284Z","modified":"2024-09-16T23:10:48.912Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:00.488332Z"}],"euvd":[{"id":"EUVD-2021-1960","description":"All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.","status":"published","published":"2021-08-18T16:15:11Z","modified":"2024-09-16T23:10:48Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P","level":"medium"}],"updated_at":"2026-11-03T00:54:56.209754Z"}],"ghsa":[{"id":"GHSA-38fc-wpqx-33j7","title":"Uncontrolled Resource Consumption in trim-off-newlines","description":"All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.","status":"published","published":"2021-09-02T17:15:42Z","modified":"2023-02-01T05:06:17Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:36:38.281533Z"}],"nvd":[{"id":"CVE-2021-23425","description":"All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.","status":"published","published":"2021-08-18T17:15:08.067Z","modified":"2026-06-17T03:38:44.4Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:57.318236Z"}],"osv":[{"id":"CVE-2021-23425","description":"All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.","status":"published","published":"2021-08-18T17:15:08.067Z","modified":"2026-10-24T10:31:06.43551099Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:18.367807Z"},{"id":"GHSA-38fc-wpqx-33j7","title":"Uncontrolled Resource Consumption in trim-off-newlines","description":"All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.","status":"published","published":"2021-09-02T17:15:42Z","modified":"2025-01-14T09:12:05.938637Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:35.406455Z"},{"id":"RHSA-2022:4711","title":"Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.0] security update","status":"published","published":"2024-09-16T06:52:10Z","modified":"2026-10-14T10:02:01Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"}]}}