{"id":"CVE-2025-30204","aliases":["ALPINE-CVE-2025-30204","ALSA-2025:3344","ALSA-2025:4669","ALSA-2025:7404","ALSA-2025:7425","ALSA-2025:7475","ALSA-2025:7967","AZL-59159","AZL-59162","AZL-59165","AZL-59168","AZL-59169","AZL-59172","AZL-59177","AZL-59180","AZL-59183","AZL-59186","AZL-59193","AZL-59196","AZL-59204","AZL-59207","AZL-59209","AZL-59217","AZL-59220","AZL-59223","AZL-59227","AZL-59229","AZL-59233","AZL-59235","AZL-59239","AZL-59242","AZL-77490","AZL-77493","AZL-77496","AZL-77498","CLSA-2025-1746655592","DEBIAN-CVE-2025-30204","EUVD-2025-7207","GHSA-mh63-6h87-95cp","GO-2025-3553","MGASA-2026-0147","RHEA-2025:4438","RHSA-2025:3344","RHSA-2025:3411","RHSA-2025:3616","RHSA-2025:3618","RHSA-2025:3698","RHSA-2025:4462","RHSA-2025:4569","RHSA-2025:4669","RHSA-2025:7404","RHSA-2025:7407","RHSA-2025:7425","RHSA-2025:7475","RHSA-2025:7479","RHSA-2025:7503","RHSA-2025:7967","RHSA-2025:8075","RHSA-2025:8267","RHSA-2026:1536","RLSA-2025:3344","RLSA-2025:3411","RLSA-2025:7479","RLSA-2025:7967","ROOT-APP-GOBINARY-CVE-2025-30204","SUSE-SU-2025:02769-1","SUSE-SU-2025:1285-1","SUSE-SU-2025:1332-1","SUSE-SU-2026:0592-1","SUSE-SU-2026:0641-1","SUSE-SU-2026:0659-1","SUSE-SU-2026:0972-1","SUSE-SU-2026:1118-1","UBUNTU-CVE-2025-30204","openSUSE-SU-2025:14937-1","openSUSE-SU-2025:14954-1","openSUSE-SU-2025:14956-1","openSUSE-SU-2025:14973-1","openSUSE-SU-2025:14989-1","openSUSE-SU-2025:14990-1","openSUSE-SU-2025:15037-1","openSUSE-SU-2025:15052-1","openSUSE-SU-2025:15054-1","openSUSE-SU-2025:15307-1","openSUSE-SU-2025:15418-1","openSUSE-SU-2025:15419-1","openSUSE-SU-2025:15454-1","openSUSE-SU-2025:15606-1","openSUSE-SU-2025:20117-1","openSUSE-SU-2026:10099-1","openSUSE-SU-2026:10100-1","openSUSE-SU-2026:10230-1","openSUSE-SU-2026:10255-1","openSUSE-SU-2026:10302-1","openSUSE-SU-2026:12297-1","openSUSE-SU-2026:12300-1","openSUSE-SU-2026:20366-1","openSUSE-SU-2026:20620-1","openSUSE-SU-2026:20798-1","openSUSE-SU-2026:21481-1"],"aliases_more":7,"status":"published","title":"jwt-go allows excessive memory allocation during header parsing","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00811,"percentile":0.57382,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-405"],"published":"2025-03-21T21:42:01Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Go","package":"github.com/golang-jwt/jwt/v5","fixed_in":["5.2.2"],"sources":["ghsa","osv"]},{"ecosystem":"Go","package":"github.com/golang-jwt/jwt/v4","fixed_in":["4.5.2"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.22","package":"rclone","fixed_in":["1.69.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"rclone","fixed_in":["1.69.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"rclone","fixed_in":["1.69.3-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"grafana","fixed_in":["10.2.6-9.el9_5","10.2.6-11.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"grafana-selinux","fixed_in":["10.2.6-9.el9_5","10.2.6-11.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"osbuild-composer","fixed_in":["118.2-1.el9_5.alma.1","132.2-1.el9_6.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"osbuild-composer-core","fixed_in":["118.2-1.el9_5.alma.1","132.2-1.el9_6.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"osbuild-composer-worker","fixed_in":["118.2-1.el9_5.alma.1","132.2-1.el9_6.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"grafana","fixed_in":["10.2.6-15.el10_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"grafana-selinux","fixed_in":["10.2.6-15.el10_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"osbuild-composer","fixed_in":["101-3.el8_10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"osbuild-composer-core","fixed_in":["101-3.el8_10.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"osbuild-composer-worker","fixed_in":["101-3.el8_10.alma.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"flannel","fixed_in":["0.24.2-12"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"prometheus","fixed_in":["2.45.4-10"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"cert-manager","fixed_in":["1.12.15-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"etcd","fixed_in":["3.5.21-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"azcopy","fixed_in":["10.25.1-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"blobfuse2","fixed_in":["2.3.2-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"coredns","fixed_in":["1.11.4-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"moby-engine","fixed_in":["25.0.3-12"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"keda","fixed_in":["2.14.1-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"application-gateway-kubernetes-ingress","fixed_in":["1.7.7-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"telegraf","fixed_in":["1.31.0-7"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"packer","fixed_in":["1.9.5-7"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"kubernetes","fixed_in":["1.30.10-4"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"azcopy","fixed_in":["10.25.1-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"moby-engine","fixed_in":["24.0.9-16"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"terraform","fixed_in":["1.3.2-24"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"coredns","fixed_in":["1.11.1-16"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"etcd","fixed_in":["3.5.21-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"prometheus","fixed_in":["2.37.9-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"cert-manager","fixed_in":["1.11.2-21"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"telegraf","fixed_in":["1.29.4-13"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"kubernetes","fixed_in":["1.28.4-16"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"packer","fixed_in":["1.9.5-12"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"application-gateway-kubernetes-ingress","fixed_in":["1.4.0-27"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"cf-cli","fixed_in":["8.4.0-27"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"dcos-cli","fixed_in":["1.2.0-24"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"dcos-cli","fixed_in":["1.2.0-21"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"influxdb","fixed_in":["2.6.1-30"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"jx","fixed_in":["3.2.236-25"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"keda","fixed_in":["2.4.0-32"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"kube-vip-cloud-provider","fixed_in":["0.0.2-26"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"kubevirt","fixed_in":["0.59.0-38"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"influxdb","fixed_in":["2.7.5-13"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grafana","fixed_in":["9.0.9-4.el9_2.alma.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"golang-github-golang-jwt-jwt","fixed_in":["5.0.0+really4.5.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"golang-github-golang-jwt-jwt","fixed_in":["5.0.0+really4.5.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"golang-github-golang-jwt-jwt-v5","fixed_in":["5.2.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"golang-github-golang-jwt-jwt-v5","fixed_in":["5.2.2-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"opentelemetry-collector","fixed_in":["0:0.107.0-10.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"grafana","fixed_in":["0:9.0.9-6.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"grafana-debuginfo","fixed_in":["0:9.0.9-6.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"grafana-debugsource","fixed_in":["0:9.0.9-6.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"grafana","fixed_in":["0:9.2.10-22.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"grafana-debuginfo","fixed_in":["0:9.2.10-22.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"grafana-debugsource","fixed_in":["0:9.2.10-22.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"grafana-selinux","fixed_in":["0:9.2.10-22.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"opentelemetry-collector","fixed_in":["0:0.107.0-8.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer","fixed_in":["0:101.3-1.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer-core","fixed_in":["0:101.3-1.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer-core-debuginfo","fixed_in":["0:101.3-1.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer-debuginfo","fixed_in":["0:101.3-1.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer-debugsource","fixed_in":["0:101.3-1.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer-tests-debuginfo","fixed_in":["0:101.3-1.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer-worker","fixed_in":["0:101.3-1.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer-worker-debuginfo","fixed_in":["0:101.3-1.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer","fixed_in":["0:76.1-1.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-core","fixed_in":["0:76.1-1.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-core-debuginfo","fixed_in":["0:76.1-1.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-debuginfo","fixed_in":["0:76.1-1.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-debugsource","fixed_in":["0:76.1-1.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-dnf-json","fixed_in":["0:76.1-1.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-tests-debuginfo","fixed_in":["0:76.1-1.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-worker","fixed_in":["0:76.1-1.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-worker-debuginfo","fixed_in":["0:76.1-1.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer","fixed_in":["0:118.2-1.el9_5","0:132.2-1.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-core","fixed_in":["0:118.2-1.el9_5","0:132.2-1.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-core-debuginfo","fixed_in":["0:118.2-1.el9_5","0:132.2-1.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-debuginfo","fixed_in":["0:118.2-1.el9_5","0:132.2-1.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-debugsource","fixed_in":["0:118.2-1.el9_5","0:132.2-1.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-tests-debuginfo","fixed_in":["0:118.2-1.el9_5","0:132.2-1.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-worker","fixed_in":["0:118.2-1.el9_5","0:132.2-1.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-worker-debuginfo","fixed_in":["0:118.2-1.el9_5","0:132.2-1.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana","fixed_in":["0:10.2.6-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana-debuginfo","fixed_in":["0:10.2.6-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana-debugsource","fixed_in":["0:10.2.6-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana-selinux","fixed_in":["0:10.2.6-11.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"grafana","fixed_in":["0:10.2.6-15.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"grafana-debuginfo","fixed_in":["0:10.2.6-15.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"grafana-debugsource","fixed_in":["0:10.2.6-15.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"grafana-selinux","fixed_in":["0:10.2.6-15.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"osbuild-composer","fixed_in":["0:134.1-1.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"osbuild-composer-core","fixed_in":["0:134.1-1.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"osbuild-composer-core-debuginfo","fixed_in":["0:134.1-1.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"osbuild-composer-debugsource","fixed_in":["0:134.1-1.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"osbuild-composer-tests-debuginfo","fixed_in":["0:134.1-1.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"osbuild-composer-worker","fixed_in":["0:134.1-1.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.0","package":"osbuild-composer-worker-debuginfo","fixed_in":["0:134.1-1.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer","fixed_in":["0:101-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer-core","fixed_in":["0:101-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer-core-debuginfo","fixed_in":["0:101-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer-debuginfo","fixed_in":["0:101-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer-debugsource","fixed_in":["0:101-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer-tests-debuginfo","fixed_in":["0:101-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer-worker","fixed_in":["0:101-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer-worker-debuginfo","fixed_in":["0:101-3.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer","fixed_in":["0:75-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-core","fixed_in":["0:75-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-core-debuginfo","fixed_in":["0:75-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-debuginfo","fixed_in":["0:75-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-debugsource","fixed_in":["0:75-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-dnf-json","fixed_in":["0:75-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-tests-debuginfo","fixed_in":["0:75-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-worker","fixed_in":["0:75-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-worker-debuginfo","fixed_in":["0:75-3.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer","fixed_in":["0:46.3-3.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer-core","fixed_in":["0:46.3-3.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer-core-debuginfo","fixed_in":["0:46.3-3.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer-debugsource","fixed_in":["0:46.3-3.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer-dnf-json","fixed_in":["0:46.3-3.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer-tests-debuginfo","fixed_in":["0:46.3-3.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer-worker","fixed_in":["0:46.3-3.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer-worker-debuginfo","fixed_in":["0:46.3-3.el9_0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"grafana","fixed_in":["0:10.2.6-9.el9_5"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"opentelemetry-collector","fixed_in":["0:0.107.0-10.el9_5"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"osbuild-composer","fixed_in":["0:101-3.el8_10.rocky.0.6"],"sources":["osv"]},{"ecosystem":"Root:Go","package":"github.com/golang-jwt/jwt/v4","fixed_in":["v4.5.0-aikido.2","v4.5.1-aikido.1","v4.4.2-aikido.1"],"sources":["osv"]},{"ecosystem":"Root:Go","package":"github.com/golang-jwt/jwt","fixed_in":["v3.2.2-aikido.1+incompatible"],"sources":["osv"]},{"ecosystem":"Root:Go","package":"rootio-github.com/golang-jwt/jwt/v4","fixed_in":["v4.5.0-root.io.1","v4.5.0-root.io.2","v4.5.1-root.io.1","v4.4.2-root.io.1"],"sources":["osv"]},{"ecosystem":"Root:Go","package":"rootio-github.com/golang-jwt/jwt","fixed_in":["v3.2.2-root.io.1+incompatible"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"amber-cli","fixed_in":["1.13.1+git20250329.c2e3bb8-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"amber-cli","fixed_in":["1.13.1+git20250329.c2e3bb8-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"amber-cli","fixed_in":["1.13.1+git20250329.c2e3bb8-150600.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"etcd","fixed_in":["3.5.21-150000.7.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"docker-stable","fixed_in":["24.0.9_ce-1.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"docker-stable","fixed_in":["24.0.9_ce-1.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.36.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"docker-stable","fixed_in":["24.0.9_ce-150000.1.36.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"gotosocial","fixed_in":["0.18.3-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"headscale","fixed_in":["0.25.1-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"etcd","fixed_in":["3.5.21-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"flannel","fixed_in":["0.26.6-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"amber-cli","fixed_in":["1.13.1+git20250329.c2e3bb8-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"traefik","fixed_in":["3.5.0-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"traefik2","fixed_in":["2.11.28-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"digger-cli","fixed_in":["0.6.127-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"zli","fixed_in":["2.1.14-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"zot-registry","fixed_in":["2.1.14-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/golang-jwt/jwt/v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0-rc.1"},{"fixed":"5.2.2"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/golang-jwt/jwt/v4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.2"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/golang-jwt/jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"last_affected":"3.2.2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"rclone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.69.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"rclone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.69.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"rclone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.69.3-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.6-9.el9_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grafana-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.6-9.el9_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"osbuild-composer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.2-1.el9_5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"osbuild-composer-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.2-1.el9_5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"osbuild-composer-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"118.2-1.el9_5.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.6-11.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"grafana-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.6-11.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"osbuild-composer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"132.2-1.el9_6.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"osbuild-composer-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"132.2-1.el9_6.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"osbuild-composer-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"132.2-1.el9_6.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.6-15.el10_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"grafana-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.6-15.el10_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"osbuild-composer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"101-3.el8_10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"osbuild-composer-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"101-3.el8_10.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"osbuild-composer-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"101-3.el8_10.alma.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"flannel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.2-12"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.4-10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"cert-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.15-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"etcd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"azcopy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.25.1-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"blobfuse2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"coredns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.4-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"moby-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.3-12"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"keda","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.1-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"nmi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.8.17-6"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"application-gateway-kubernetes-ingress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.7-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"telegraf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.0-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"packer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.10-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"azcopy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.25.1-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"moby-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9-16"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"terraform","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-24"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"coredns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-16"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"etcd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.9-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"cert-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.2-21"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"telegraf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.4-13"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.4-16"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"packer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-12"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"application-gateway-kubernetes-ingress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-27"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"cf-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.4.0-27"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"dcos-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-24"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"dcos-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-21"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"influxdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-30"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"jx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.236-25"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"keda","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-32"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"kube-vip-cloud-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.2-26"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.59.0-38"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"influxdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-13"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"rook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.6.2-27"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.9-4.el9_2.alma.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"golang-github-golang-jwt-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.3-1","5.0.0+really4.5.0-1","5.0.0+really4.5.0-1~exp1","5.0.0+really4.5.0-2","5.0.0+really4.5.2-1","5.0.0-1"]},{"source":"osv","ecosystem":"Debian:13","package":"golang-github-golang-jwt-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0+really4.5.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"golang-github-golang-jwt-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0+really4.5.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"golang-github-golang-jwt-jwt-v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"golang-github-golang-jwt-jwt-v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/golang-jwt/jwt/v5","ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0-rc.1"},{"fixed":"5.2.2"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/golang-jwt/jwt/v4","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.5.2"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/golang-jwt/jwt","ranges":[{"type":"SEMVER","events":[{"introduced":"3.2.0"},{"last_affected":"3.2.2"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/golang-jwt/jwt","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/golang-jwt/jwt/v4","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.5.2"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/golang-jwt/jwt/v5","ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0-rc.1"},{"fixed":"5.2.2"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"rclone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.73.5-1.1.mga9"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:openshift_service_on_aws:1::el8","package":"rosa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.53-5be4e19.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift_service_on_aws:1::el8","package":"rosa-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.53-5be4e19.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-9.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-9.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-9.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-9.el9_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"opentelemetry-collector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.107.0-10.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.9-6.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"grafana-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.9-6.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"grafana-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.9-6.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-22.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"grafana-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-22.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"grafana-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-22.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"grafana-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.2.10-22.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"opentelemetry-collector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.107.0-8.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101.3-1.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101.3-1.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101.3-1.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101.3-1.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101.3-1.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101.3-1.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101.3-1.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"osbuild-composer-worker-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101.3-1.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:76.1-1.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:76.1-1.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:76.1-1.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:76.1-1.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:76.1-1.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-dnf-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:76.1-1.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:76.1-1.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:76.1-1.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"osbuild-composer-worker-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:76.1-1.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:118.2-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:118.2-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:118.2-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:118.2-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:118.2-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:118.2-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:118.2-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-worker-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:118.2-1.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"grafana-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-11.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"opentelemetry-collector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.107.0-8.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:132.2-1.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:132.2-1.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:132.2-1.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:132.2-1.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:132.2-1.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:132.2-1.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:132.2-1.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"osbuild-composer-worker-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:132.2-1.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-15.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"grafana-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-15.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"grafana-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-15.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"grafana-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-15.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"opentelemetry-collector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.107.0-9.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"osbuild-composer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:134.1-1.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"osbuild-composer-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:134.1-1.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"osbuild-composer-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:134.1-1.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"osbuild-composer-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:134.1-1.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"osbuild-composer-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:134.1-1.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"osbuild-composer-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:134.1-1.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"osbuild-composer-worker-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:134.1-1.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"osbuild-composer-worker-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101-3.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-dnf-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"osbuild-composer-worker-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-3.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46.3-3.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46.3-3.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46.3-3.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46.3-3.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer-dnf-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46.3-3.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46.3-3.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46.3-3.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"osbuild-composer-worker-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46.3-3.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-exporter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-mon-client-nvmeof-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"libcephfs-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"libcephfs-proxy2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"libcephfs-proxy2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el10","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el10cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-exporter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-mon-client-nvmeof-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"libcephfs-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"libcephfs-proxy2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"libcephfs-proxy2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:9.0::el9","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-144.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.2.6-9.el9_5"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"opentelemetry-collector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.107.0-10.el9_5"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"opentelemetry-collector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.107.0-9.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"osbuild-composer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:101-3.el8_10.rocky.0.6"}]}]},{"source":"osv","ecosystem":"Root:Go","package":"github.com/golang-jwt/jwt/v4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"v4.5.0-aikido.2"},{"fixed":"v4.5.1-aikido.1"},{"fixed":"v4.4.2-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Go","package":"github.com/golang-jwt/jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"v3.2.2-aikido.1+incompatible"}]}]},{"source":"osv","ecosystem":"Root:Go","package":"rootio-github.com/golang-jwt/jwt/v4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"v4.5.0-root.io.1"},{"fixed":"v4.5.0-root.io.2"},{"fixed":"v4.5.1-root.io.1"},{"fixed":"v4.4.2-root.io.1"}]}]},{"source":"osv","ecosystem":"Root:Go","package":"rootio-github.com/golang-jwt/jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"v3.2.2-root.io.1+incompatible"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"amber-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1+git20250329.c2e3bb8-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"amber-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1+git20250329.c2e3bb8-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"amber-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1+git20250329.c2e3bb8-150600.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"etcd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-150000.7.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"vexctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1+git78.f951e3a-150000.1.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.36.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.39.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.39.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-github-golang-jwt-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.1.0-1","4.1.0-2","4.2.0-1","4.2.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"golang-github-golang-jwt-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.3-1build1","5.0.0+really4.5.0-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"golang-github-golang-jwt-jwt-v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.0-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250327T184518-1.1"}]}],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gotosocial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.18.3-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"headscale","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.1-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"etcd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"flannel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.6-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"amber-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1+git20250329.c2e3bb8-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.5.4-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rclone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.69.2-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"velociraptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.4.git163.87ee3570-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"traefik","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"traefik2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.28-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"trivy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.65.0-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"digger-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.127-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"zli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.14-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"zot-registry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.14-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"vexctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1+git78.f951e3a-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kubeshark-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"53.1.0-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kubectl-retina","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kumactl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-1.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-160000.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"vexctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4+git20.5d61136-160000.1.1"}]}],"bundled":9}],"products":[{"vendor":"golang-jwt","product":"jwt"}],"references":[{"url":"https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp","tags":["x_refsource_CONFIRM","advisory","web","article"]},{"url":"https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3","tags":["x_refsource_MISC","fix","web","article"]},{"url":"https://github.com/golang-jwt/jwt/commit/bf316c48137a1212f8d0af9288cc9ce8e59f1afb","tags":["x_refsource_MISC","fix","web"]},{"url":"https://security.netapp.com/advisory/ntap-20250404-0002/","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30204","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20250404-0002","tags":["web"]},{"url":"https://github.com/advisories/GHSA-mh63-6h87-95cp"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-30204","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3344","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30204","tags":["report"]},{"url":"https://bugzilla.redhat.com/2354195","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-3344.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4669","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-4669.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7404","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-7404.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7425","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-7425.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7475","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-7475.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7967","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-7967.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1746655592.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/30xxx/CVE-2025-30204.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-30204","tags":["advisory"]},{"url":"https://github.com/golang-jwt/jwt","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2026-0147.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33808","tags":["report"]},{"url":"https://rclone.org/changelog/#v1-73-5-2026-04-19","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-73-4-2026-04-08","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-73-3-2026-03-23","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-73-2-2026-03-06","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-73-1-2026-02-17","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-73-0-2026-01-30","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-72-1-2025-12-10","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-72-0-2025-11-21","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-71-2-2025-10-20","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-71-1-2025-09-24","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-71-0-2025-08-22","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-70-3-2025-07-09","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-70-2-2025-06-27","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-70-1-2025-06-19","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-70-0-2025-06-17","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-69-3-2025-05-21","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-69-2-2025-05-01","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-69-1-2025-02-14","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-69-0-2025-01-12","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-68-2-2024-11-15","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-68-1-2024-09-24","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-68-0-2024-09-08","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-67-0-2024-06-14","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-66-0-2024-03-10","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-65-2-2024-01-24","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-65-1-2024-01-08","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-65-0-2023-11-26","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-64-2-2023-10-19","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-64-1-2023-10-17","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-64-0-2023-09-11","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-63-1-2023-07-17","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-63-0-2023-06-30","tags":["web"]},{"url":"https://rclone.org/changelog/#v1-62-2-2023-03-16","tags":["web"]},{"url":"https://access.redhat.com/errata/RHEA-2025:4438","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/OCM-14567","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCM-14796","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCM-14846","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCM-14864","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCM-14892","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCM-14948","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCM-15159","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCM-4667","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCM-9780","tags":["article"]},{"url":"https://issues.redhat.com/browse/OSD-28968","tags":["article"]},{"url":"https://issues.redhat.com/browse/ROSAENG-16904","tags":["article"]},{"url":"https://issues.redhat.com/browse/ROSAENG-17384","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhea-2025_4438.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-45337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2331720","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-45337","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45337","tags":["advisory"]},{"url":"https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909","tags":["article"]},{"url":"https://go.dev/cl/635315","tags":["article"]},{"url":"https://go.dev/issue/70779","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2024-3321","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354195","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-30204","tags":["advisory","report"]},{"url":"https://pkg.go.dev/vuln/GO-2025-3553","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3344.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-21613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2335888","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-21613","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21613","tags":["advisory"]},{"url":"https://github.com/go-git/go-git/security/advisories/GHSA-v725-9546-7q7m","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-3368","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3411","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3411.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3616","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3616.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3618","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3618.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3698","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3698.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4462","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4462.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4569","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4569.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4669.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7404.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7407","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2347423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2348366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352914","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7407.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-22868","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-22868","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22868","tags":["advisory"]},{"url":"https://go.dev/cl/652155","tags":["article"]},{"url":"https://go.dev/issue/71490","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-3488","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-27144","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27144","tags":["advisory"]},{"url":"https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22","tags":["article"]},{"url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.5","tags":["article"]},{"url":"https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-29786","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-29786","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-29786","tags":["advisory"]},{"url":"https://github.com/expr-lang/expr/pull/762","tags":["article"]},{"url":"https://github.com/expr-lang/expr/security/advisories/GHSA-93mq-9ffx-83m2","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7425.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7475.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7479","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7479.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7503","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7503.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7967.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8075","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8075.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8267","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8267.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:1536","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1892474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2011600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2022705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2036531","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2154745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2174473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270403","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2273066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2276931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279848","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2282699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2283916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2293233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2294700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2298638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2302464","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2302541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2303488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2305185","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2305659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2309383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2309470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2312579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2312933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2312937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2313740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2313801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2313820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315832","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2317778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2319055","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2319581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2322389","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2324147","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2329994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2338350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2341758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2343728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2346030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2346107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2346779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2348664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2349154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2350732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354783","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2358811","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2360425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2360695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2361672","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2362686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2362867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2363597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2363934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2364323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2364399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2364414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2365931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2370197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2370353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2370358","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2370450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2370541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2371109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2371110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2371418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372438","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372675","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2375000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2376165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2376756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2377090","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2379131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2379222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2379275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2379788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2379790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2379861","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2379872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2379914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380071","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2380738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2381576","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2381577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2381960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2383180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2383217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2383548","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2385921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2385946","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2385951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2385952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2385959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2385960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2385962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2386473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2386743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2387075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2387592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2387764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2388210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2388477","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2389164","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2389280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2389764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2389907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2390032","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2390060","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2390658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2390708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2391477","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2391529","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2391692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2393264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2393415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2393440","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2393477","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2393790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2393857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2394062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2394077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2394196","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2394366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2394395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2394511","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2394541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2395169","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2395210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2396437","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2396582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2396583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2396637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2397780","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2397793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2398027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2398033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2398040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2398042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2398047","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2398048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2398058","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2398061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2398063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2398150","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2400114","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2400121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2400177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2400414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2400427","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2400565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2400686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2400920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2401174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2401206","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2401399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2401685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2401750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2401776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2401806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2401876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402035","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402054","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2403464","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2403487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2403699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2403700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2403702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2403703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2403705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2405377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2405397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2405692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2405986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2405989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2406035","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2406182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2406510","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2406696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2406794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2406837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2406973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2408795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2411930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2411963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2412218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2412220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2412238","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2412273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2412500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2413062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2413276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2413522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2413723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2413802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414841","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2415313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2415656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2415796","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2415823","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416941","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2417210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2417224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2417952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2419075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2419090","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2419138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2419151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2419667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2419834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2420485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2420499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2421370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2421457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2423160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2423971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2424287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2427585","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1536.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25153","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25153","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25153","tags":["advisory"]},{"url":"https://github.com/containerd/containerd/commit/0c314901076a74a7b797a545d2f462285fdbb8c4","tags":["article"]},{"url":"https://github.com/containerd/containerd/releases/tag/v1.5.18","tags":["article"]},{"url":"https://github.com/containerd/containerd/releases/tag/v1.6.18","tags":["article"]},{"url":"https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-11831","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-11831","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11831","tags":["advisory"]},{"url":"https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e","tags":["article"]},{"url":"https://github.com/yahoo/serialize-javascript/pull/173","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-31884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-31884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-31884","tags":["advisory"]},{"url":"https://github.com/ceph/ceph/pull/66089","tags":["article"]},{"url":"https://github.com/ceph/ceph/pull/66140","tags":["article"]},{"url":"https://github.com/ceph/ceph/pull/66141","tags":["article"]},{"url":"https://github.com/ceph/ceph/pull/66142","tags":["article"]},{"url":"https://github.com/ceph/ceph/security/advisories/GHSA-xj9f-7g59-m4jx","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-52555","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-52555","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52555","tags":["advisory"]},{"url":"https://github.com/ceph/ceph/pull/60314","tags":["article"]},{"url":"https://github.com/ceph/ceph/security/advisories/GHSA-89hm-qq33-2fjm","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2025:3344","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:3411","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:7479","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:7967","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502769-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1047218","tags":["report"]},{"url":"https://bugzilla.suse.com/1240511","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30204","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251285-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240515","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251332-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1227053","tags":["report"]},{"url":"https://bugzilla.suse.com/1236519","tags":["report"]},{"url":"https://bugzilla.suse.com/1237638","tags":["report"]},{"url":"https://bugzilla.suse.com/1239191","tags":["report"]},{"url":"https://bugzilla.suse.com/1239327","tags":["report"]},{"url":"https://bugzilla.suse.com/1240468","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27144","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260592-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1234486","tags":["report"]},{"url":"https://bugzilla.suse.com/1237611","tags":["report"]},{"url":"https://bugzilla.suse.com/1238683","tags":["report"]},{"url":"https://bugzilla.suse.com/1239186","tags":["report"]},{"url":"https://bugzilla.suse.com/1239323","tags":["report"]},{"url":"https://bugzilla.suse.com/1240444","tags":["report"]},{"url":"https://bugzilla.suse.com/1253802","tags":["report"]},{"url":"https://bugzilla.suse.com/1256535","tags":["report"]},{"url":"https://bugzilla.suse.com/1257138","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24137","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260641-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240513","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260659-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260972-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1253904","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-29018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41110","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261118-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-30204","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NEVFAGUWHTVZSJTUAIU6C4S26DP2KIGB/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-25132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-25068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-25274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30179","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RDRQUFBQNFRUIM2F2EPVEBMFI6LKYQ4J/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MGGR7W7ANU3YEPLMZP3LOTAKB42X53A7/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EULP2ZKPR2GRWBMBH66KSSP6XBVLEOIS/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4WVLSK4BXQRTF3JIGHVYEEVTW7AMWO4M/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IC2EUYZRCX6GXM6Y26SHEX6QS2URIZ2I/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SOIW5K4UTSFQ2FUGGOHNDTI4Y4PCBWTB/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2PKSIUOW7HIED3L6UVUD2KMZSPDHNUTO/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3454","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47291","tags":["web"]},{"url":"https://bugzilla.suse.com/1227010","tags":["report"]},{"url":"https://bugzilla.suse.com/1232948","tags":["report"]},{"url":"https://bugzilla.suse.com/1234512","tags":["report"]},{"url":"https://bugzilla.suse.com/1235265","tags":["report"]},{"url":"https://bugzilla.suse.com/1237618","tags":["report"]},{"url":"https://bugzilla.suse.com/1239225","tags":["report"]},{"url":"https://bugzilla.suse.com/1239385","tags":["report"]},{"url":"https://bugzilla.suse.com/1240466","tags":["report"]},{"url":"https://bugzilla.suse.com/1241724","tags":["report"]},{"url":"https://bugzilla.suse.com/1243633","tags":["report"]},{"url":"https://bugzilla.suse.com/1246151","tags":["report"]},{"url":"https://bugzilla.suse.com/1246730","tags":["report"]},{"url":"https://bugzilla.suse.com/1248897","tags":["report"]},{"url":"https://bugzilla.suse.com/1248937","tags":["report"]},{"url":"https://bugzilla.suse.com/1250625","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-51744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-72815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-95838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41178","tags":["web"]},{"url":"https://bugzilla.suse.com/1254206","tags":["report"]},{"url":"https://bugzilla.suse.com/1232964","tags":["report"]},{"url":"https://bugzilla.suse.com/1233422","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-52522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41179","tags":["web"]},{"url":"https://bugzilla.suse.com/1251363","tags":["report"]},{"url":"https://bugzilla.suse.com/1251547","tags":["report"]},{"url":"https://bugzilla.suse.com/1253512","tags":["report"]},{"url":"https://bugzilla.suse.com/1253786","tags":["report"]},{"url":"https://bugzilla.suse.com/1253977","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-30204","title":"jwt-go allows excessive memory allocation during header parsing","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T21:42:01.382Z","modified":"2025-04-10T13:03:19.897Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-405"],"updated_at":"2026-11-02T14:32:35.418416Z"}],"euvd":[{"id":"EUVD-2025-7207","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T21:42:01Z","modified":"2025-04-10T13:03:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:37.204811Z"}],"ghsa":[{"id":"GHSA-mh63-6h87-95cp","title":"jwt-go allows excessive memory allocation during header parsing","description":"### Summary\n\nFunction [`parse.ParseUnverified`](https://github.com/golang-jwt/jwt/blob/c035977d9e11c351f4c05dfeae193923cbab49ee/parser.go#L138-L139) currently splits (via a call to [strings.Split](https://pkg.go.dev/strings#Split)) its argument (which is untrusted data) on periods.\n\nAs a result, in the face of a malicious request whose _Authorization_ header consists of `Bearer ` followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. Relevant weakness: [CWE-405: Asymmetric Resource Consumption (Amplification)](https://cwe.mitre.org/data/definitions/405.html)\n\n### Details\n\nSee [`parse.ParseUnverified`](https://github.com/golang-jwt/jwt/blob/c035977d9e11c351f4c05dfeae193923cbab49ee/parser.go#L138-L139) \n\n### Impact\n\nExcessive memory allocation","status":"published","published":"2025-03-21T22:04:00Z","modified":"2025-04-10T13:02:35Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-405"],"updated_at":"2026-11-02T14:38:38.344711Z"}],"nvd":[{"id":"CVE-2025-30204","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26.42Z","modified":"2026-06-17T09:08:21.1Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-405"],"updated_at":"2026-11-02T14:10:54.744127Z"}],"osv":[{"id":"ALPINE-CVE-2025-30204","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26.42Z","modified":"2026-11-03T06:32:52.014995431Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:26.770911Z"},{"id":"CVE-2025-30204","title":"jwt-go allows excessive memory allocation during header parsing","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T21:42:01.382Z","modified":"2026-10-28T17:27:15.862214472Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-405"],"updated_at":"2026-11-02T15:44:47.708311Z"},{"id":"DEBIAN-CVE-2025-30204","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26.42Z","modified":"2026-09-01T20:05:46.135129982Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"GHSA-mh63-6h87-95cp","title":"jwt-go allows excessive memory allocation during header parsing","description":"### Summary\n\nFunction [`parse.ParseUnverified`](https://github.com/golang-jwt/jwt/blob/c035977d9e11c351f4c05dfeae193923cbab49ee/parser.go#L138-L139) currently splits (via a call to [strings.Split](https://pkg.go.dev/strings#Split)) its argument (which is untrusted data) on periods.\n\nAs a result, in the face of a malicious request whose _Authorization_ header consists of `Bearer ` followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. Relevant weakness: [CWE-405: Asymmetric Resource Consumption (Amplification)](https://cwe.mitre.org/data/definitions/405.html)\n\n### Details\n\nSee [`parse.ParseUnverified`](https://github.com/golang-jwt/jwt/blob/c035977d9e11c351f4c05dfeae193923cbab49ee/parser.go#L138-L139) \n\n### Impact\n\nExcessive memory allocation","status":"published","published":"2025-03-21T22:04:00Z","modified":"2026-09-10T03:50:56.801646453Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-405"],"updated_at":"2026-11-02T15:46:51.811331Z"},{"id":"RHEA-2025:4438","title":"Red Hat Enhancement Advisory: Red Hat OpenShift Service on AWS 1.0 enhancements","status":"published","published":"2026-08-08T10:06:24Z","modified":"2026-10-20T10:03:04Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2025:3344","title":"Red Hat Security Advisory: grafana security update","status":"published","published":"2025-03-28T10:04:21Z","modified":"2026-10-20T10:03:54Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3411","title":"Red Hat Security Advisory: opentelemetry-collector security update","status":"published","published":"2025-04-01T10:03:09Z","modified":"2026-10-20T10:03:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3616","title":"Red Hat Security Advisory: grafana security update","status":"published","published":"2025-04-07T10:03:51Z","modified":"2026-10-20T10:03:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3618","title":"Red Hat Security Advisory: grafana security update","status":"published","published":"2025-04-07T10:03:52Z","modified":"2026-10-20T10:03:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3698","title":"Red Hat Security Advisory: opentelemetry-collector security update","status":"published","published":"2025-04-09T10:04:16Z","modified":"2026-10-20T10:03:58Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4462","title":"Red Hat Security Advisory: osbuild-composer security update","status":"published","published":"2025-05-06T10:03:58Z","modified":"2026-10-20T10:03:59Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4569","title":"Red Hat Security Advisory: osbuild-composer security update","status":"published","published":"2025-05-07T10:05:49Z","modified":"2026-10-20T10:04:01Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4669","title":"Red Hat Security Advisory: osbuild-composer security update","status":"published","published":"2025-05-08T10:04:13Z","modified":"2026-10-20T10:04:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7404","title":"Red Hat Security Advisory: grafana security update","status":"published","published":"2025-05-14T10:06:12Z","modified":"2026-10-20T10:04:04Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7407","title":"Red Hat Security Advisory: opentelemetry-collector security update","status":"published","published":"2025-05-14T10:06:13Z","modified":"2026-10-20T10:04:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7425","title":"Red Hat Security Advisory: osbuild-composer security update","status":"published","published":"2025-05-14T10:06:19Z","modified":"2026-10-20T10:04:06Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7475","title":"Red Hat Security Advisory: grafana security update","status":"published","published":"2025-05-14T10:06:32Z","modified":"2026-10-20T10:04:07Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7479","title":"Red Hat Security Advisory: opentelemetry-collector security update","status":"published","published":"2025-05-14T10:06:34Z","modified":"2026-10-20T10:04:08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7503","title":"Red Hat Security Advisory: osbuild-composer security update","status":"published","published":"2025-05-14T10:06:43Z","modified":"2026-10-20T10:04:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7967","title":"Red Hat Security Advisory: osbuild-composer security update","status":"published","published":"2025-05-20T10:12:04Z","modified":"2026-10-20T10:04:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8075","title":"Red Hat Security Advisory: osbuild-composer security update","status":"published","published":"2025-05-22T10:07:04Z","modified":"2026-10-20T10:04:10Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8267","title":"Red Hat Security Advisory: osbuild-composer security update","status":"published","published":"2025-05-29T10:03:30Z","modified":"2026-10-20T10:04:11Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2026:1536","title":"Red Hat Security Advisory: Red Hat Ceph Storage 9.0 Security and Enhancement update","status":"published","published":"2026-01-29T10:21:05Z","modified":"2026-10-20T10:05:01Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RLSA-2025:3344","title":"Important: grafana security update","description":"Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB \u0026 OpenTSDB. \n\nSecurity Fix(es):\n\n* golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:40:19.644888Z","modified":"2025-07-29T15:00:30.693583Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:3411","title":"Important: opentelemetry-collector security update","description":"Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry\n\nSecurity Fix(es):\n\n* golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:40:19.644888Z","modified":"2025-07-29T14:33:25.671975Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:7479","title":"Important: opentelemetry-collector security update","description":"Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry\n\nSecurity Fix(es):\n\n* go-jose: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144)\n\n* golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws (CVE-2025-22868)\n\n* github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input (CVE-2025-29786)\n\n* golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-08T17:12:39.190799Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:7967","title":"Important: osbuild-composer security update","description":"A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud.  It is compatible with composer-cli and cockpit-composer clients.\n\nSecurity Fix(es):\n\n* golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-21T16:24:56.966088Z","modified":"2026-05-21T17:00:08.137862928Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"ROOT-APP-GOBINARY-CVE-2025-30204","title":"CVE-2025-30204 in github.com/golang-jwt/jwt/v4 - Patched by Root","description":"Root has patched CVE-2025-30204 in the github.com/golang-jwt/jwt/v4 package for Root:Go. Multiple fixed versions available.","status":"published","published":"2026-10-22T07:06:30Z","modified":"2026-10-22T08:15:06.800925374Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"UBUNTU-CVE-2025-30204","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:00Z","modified":"2025-09-08T17:08:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"ALSA-2025:3344","title":"Important: grafana security update","description":"Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB \u0026 OpenTSDB.   \n\nSecurity Fix(es):  \n\n  * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-03-27T00:00:00Z","modified":"2026-10-29T11:32:15.357174271Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:4669","title":"Important: osbuild-composer security update","description":"A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  \n\nSecurity Fix(es):  \n\n  * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-07T00:00:00Z","modified":"2026-10-29T11:32:06.120546618Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:7404","title":"Important: grafana security update","description":"Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB \u0026 OpenTSDB.   \n\nSecurity Fix(es):  \n\n  * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-13T00:00:00Z","modified":"2026-10-29T11:32:29.817677677Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:7425","title":"Important: osbuild-composer security update","description":"A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  \n\nSecurity Fix(es):  \n\n  * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-13T00:00:00Z","modified":"2026-10-29T11:32:17.117722182Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:7475","title":"Important: grafana security update","description":"Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB \u0026 OpenTSDB.   \n\nSecurity Fix(es):  \n\n  * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-13T00:00:00Z","modified":"2026-10-29T11:58:18.186011Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:7967","title":"Important: osbuild-composer security update","description":"A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients.  \n\nSecurity Fix(es):  \n\n  * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-19T00:00:00Z","modified":"2026-10-29T11:02:23.095009654Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"AZL-59159","title":"CVE-2025-30204 affecting package flannel for versions less than 0.24.2-12","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"AZL-59162","title":"CVE-2025-30204 affecting package prometheus for versions less than 2.45.4-10","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26Z","modified":"2026-04-21T04:54:07.513572Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-59165","title":"CVE-2025-30204 affecting package cert-manager for versions less than 1.12.15-3","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"AZL-59168","title":"CVE-2025-30204 affecting package etcd for versions less than 3.5.21-1","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26Z","modified":"2026-04-21T04:55:31.719841Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-59169","title":"CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-3","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"AZL-59172","title":"CVE-2025-30204 affecting package blobfuse2 for versions less than 2.3.2-2","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26Z","modified":"2026-04-21T04:47:37.205752Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-59177","title":"CVE-2025-30204 affecting package coredns for versions less than 1.11.4-5","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"AZL-59180","title":"CVE-2025-30204 affecting package moby-engine for versions less than 25.0.3-12","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26Z","modified":"2026-10-31T15:02:25Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-59183","title":"CVE-2025-30204 affecting package keda for versions less than 2.14.1-5","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26Z","modified":"2026-10-31T15:02:25Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-59186","title":"CVE-2025-30204 affecting package nmi 1.8.17-6","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26Z","modified":"2026-04-21T04:37:13.314368Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-59193","title":"CVE-2025-30204 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-2","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"AZL-59196","title":"CVE-2025-30204 affecting package telegraf for versions less than 1.31.0-7","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"AZL-59204","title":"CVE-2025-30204 affecting package packer for versions less than 1.9.5-7","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"AZL-59207","title":"CVE-2025-30204 affecting package kubernetes for versions less than 1.30.10-4","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"AZL-59209","title":"CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-5","description":"golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer  followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.","status":"published","published":"2025-03-21T22:15:26Z","modified":"2026-04-21T04:37:13.666218Z","updated_at":"2026-11-02T15:28:07.517393Z"}]},"sources_more":{"osv":57}}