{"id":"CVE-2025-69873","aliases":["CLSA-2026-1773015259","CLSA-2026-1773015260","CLSA-2026-1773015261","CLSA-2026-1774398087","CLSA-2026-1774570936","CLSA-2026-1774570946","CLSA-2026-1774916723","CLSA-2026-1775003172","CLSA-2026-1776213250","CLSA-2026-1776818196","CLSA-2026-1779151625","CLSA-2026-1779151627","CLSA-2026-1779151633","CLSA-2026-1781052732","CLSA-2026-1787001707","CLSA-2026-1790161390","CLSA-2026-1790763286","CLSA-2026-1792488470","CLSA-2026-1792766110","CLSA-2026-1793046415","CLSA-2026-1793097555","DEBIAN-CVE-2025-69873","EUVD-2025-207389","GHSA-2g4f-4pwh-qvx6","RHSA-2026:13512","RHSA-2026:33371","RHSA-2026:6277","ROOT-APP-NPM-CVE-2025-69873","UBUNTU-CVE-2025-69873"],"status":"published","title":"ajv has ReDoS when using `$data` option","description":"ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaScript RegExp() constructor without validation. An attacker can inject a malicious regex pattern (e.g., \"^(a|a)*$\") combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with $data: true for dynamic schema validation. This issue is also fixed in version 6.14.0.","severity":{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00539,"percentile":0.45694,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1333","CWE-400"],"published":"2026-02-11T00:00:00Z","modified":"2026-10-28T02:30:56Z","fixes":[{"ecosystem":"npm","package":"ajv","fixed_in":["8.18.0","6.14.0"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:npm","package":"ajv","fixed_in":["8.12.0-tuxcare.1","8.17.1-tuxcare.3","8.11.0-tuxcare.1","8.9.0-tuxcare.1","8.6.2-tuxcare.1","6.12.6-tuxcare.1","5.5.2-tuxcare.4","6.12.4-tuxcare.1","6.12.3-tuxcare.1","6.10.0-tuxcare.2","6.10.2-tuxcare.2","8.6.3-tuxcare.1","8.11.2-tuxcare.1","8.17.1-tuxcare.4","8.1.0-tuxcare.1","6.5.2-tuxcare.2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"node-ajv","fixed_in":["8.18.0~ds+~cs6.1.1-1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/ajv","fixed_in":["6.12.6-root.io.1","8.12.0-root.io.1","8.17.1-root.io.1","8.17.1-root.io.2","6.12.6-root.io.2","8.12.0-root.io.2","4.11.8-root.io.1","4.11.8-root.io.2","6.12.6-root.io.3","8.12.0-root.io.3","8.17.1-root.io.3","8.12.0-root.io.4","8.17.1-root.io.4","4.11.8-root.io.3","5.5.2-root.io.1","6.5.2-root.io.1","6.5.2-root.io.2","5.5.2-root.io.2"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"ajv","fixed_in":["4.11.8-aikido.2","6.12.6-aikido.3","8.12.0-aikido.3","8.17.1-aikido.3","8.12.0-aikido.4","8.17.1-aikido.4","4.11.8-aikido.3","5.5.2-aikido.1","6.5.2-aikido.1","6.5.2-aikido.2","5.5.2-aikido.2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-alpha.0"},{"fixed":"8.18.0"}]}]},{"source":"ghsa","ecosystem":"npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14.0"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.12.0-tuxcare.0"},{"fixed":"8.12.0-tuxcare.1"}]}],"versions":["8.12.0"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.17.1-tuxcare.0"},{"fixed":"8.17.1-tuxcare.3"}]}],"versions":["8.17.1","8.17.1-tuxcare.1","8.17.1-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.11.0-tuxcare.0"},{"fixed":"8.11.0-tuxcare.1"}]}],"versions":["8.11.0"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.8-tuxcare.0"},{"fixed":"4.11.8-tuxcare.1"}]}],"versions":["4.11.8"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.14.0-tuxcare.0"},{"fixed":"6.14.0-tuxcare.1"}]}],"versions":["6.14.0"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.9.0-tuxcare.0"},{"fixed":"8.9.0-tuxcare.1"}]}],"versions":["8.9.0"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.6.2-tuxcare.0"},{"fixed":"8.6.2-tuxcare.1"}]}],"versions":["8.6.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.12.6-tuxcare.0"},{"fixed":"6.12.6-tuxcare.1"}]}],"versions":["6.12.6"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.9.1-tuxcare.0"},{"fixed":"6.9.1-tuxcare.1"}]}],"versions":["6.9.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.2-tuxcare.0"},{"fixed":"5.5.2-tuxcare.4"}]}],"versions":["5.5.2","5.5.2-tuxcare.1","5.5.2-tuxcare.2","5.5.2-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.0-tuxcare.0"},{"fixed":"6.4.0-tuxcare.1"}]}],"versions":["6.4.0"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.12.4-tuxcare.0"},{"fixed":"6.12.4-tuxcare.1"}]}],"versions":["6.12.4"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.12.3-tuxcare.0"},{"fixed":"6.12.3-tuxcare.1"}]}],"versions":["6.12.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.11.0-tuxcare.0"},{"fixed":"6.11.0-tuxcare.1"}]}],"versions":["6.11.0"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.10.0-tuxcare.0"},{"fixed":"6.10.0-tuxcare.2"}]}],"versions":["6.10.0","6.10.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.10.2-tuxcare.0"},{"fixed":"6.10.2-tuxcare.2"}]}],"versions":["6.10.2","6.10.2-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.6.3-tuxcare.0"},{"fixed":"8.6.3-tuxcare.1"}]}],"versions":["8.6.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.11.2-tuxcare.0"},{"fixed":"8.11.2-tuxcare.1"}]}],"versions":["8.11.2"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.17.1-tuxcare.0"},{"fixed":"8.17.1-tuxcare.4"}]}],"versions":["8.17.1","8.17.1-tuxcare.1","8.17.1-tuxcare.2","8.17.1-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1.0-tuxcare.0"},{"fixed":"8.1.0-tuxcare.1"}]}],"versions":["8.1.0"]},{"source":"osv","ecosystem":"TuxCare:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.2-tuxcare.0"},{"fixed":"6.5.2-tuxcare.2"}]}],"versions":["6.5.2","6.5.2-tuxcare.1"]},{"source":"osv","ecosystem":"Debian:12","package":"node-ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.12.6-3","8.11.2~ds+~2.1.1-1","8.12.0~ds+~2.1.1-1","8.12.0~ds+~2.1.1-2","8.12.0~ds+~2.1.1-3","8.12.0~ds+~2.1.1-4","8.12.0~ds+~2.1.1-5","8.17.1~ds+~3.0.1+~3.1.0-1","8.17.1~ds+~3.0.1+~3.1.0-2","8.17.1~ds+~3.0.1+~3.1.0-3","8.17.1~ds+~3.0.1+~3.1.0-4","8.18.0~ds+~cs6.1.1-1","8.18.0~ds+~cs6.1.1-2","8.20.0~ds+~cs6.1.3-1","8.20.0~ds+~cs7.1.2-1","8.20.0~ds+~cs7.1.3-1","8.20.0~ds+~cs7.1.3-2","8.20.0~ds+~cs7.1.3-3","8.20.0~ds+~cs7.1.4-1","8.20.0~ds+~cs7.1.5-1","8.8.2~ds+~2.1.1-1"]},{"source":"osv","ecosystem":"Debian:13","package":"node-ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.12.0~ds+~2.1.1-5","8.17.1~ds+~3.0.1+~3.1.0-1","8.17.1~ds+~3.0.1+~3.1.0-2","8.17.1~ds+~3.0.1+~3.1.0-3","8.17.1~ds+~3.0.1+~3.1.0-4","8.18.0~ds+~cs6.1.1-1","8.18.0~ds+~cs6.1.1-2","8.20.0~ds+~cs6.1.3-1","8.20.0~ds+~cs7.1.2-1","8.20.0~ds+~cs7.1.3-1","8.20.0~ds+~cs7.1.3-2","8.20.0~ds+~cs7.1.3-3","8.20.0~ds+~cs7.1.4-1","8.20.0~ds+~cs7.1.5-1"]},{"source":"osv","ecosystem":"Debian:14","package":"node-ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.18.0~ds+~cs6.1.1-1"}]}],"versions":["8.12.0~ds+~2.1.1-5","8.17.1~ds+~3.0.1+~3.1.0-1","8.17.1~ds+~3.0.1+~3.1.0-2","8.17.1~ds+~3.0.1+~3.1.0-3","8.17.1~ds+~3.0.1+~3.1.0-4"]},{"source":"osv","ecosystem":"npm","package":"ajv","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.0-alpha.0"},{"fixed":"8.18.0"}]}]},{"source":"osv","ecosystem":"npm","package":"ajv","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.14.0"}]}]},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.2-1.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.10.2-1.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-gateway-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-gateway-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-controller-venv-tower","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.28-3.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-django-ansible-base+activitystream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-django-ansible-base+api_documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-django-ansible-base+authentication","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-django-ansible-base+channel_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-django-ansible-base+feature_flags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-django-ansible-base+jwt_consumer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-django-ansible-base+oauth2_provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-django-ansible-base+rbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-django-ansible-base+redis_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-django-ansible-base+rest_filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-django-ansible-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-controller-venv-tower","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.28-3.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-django-ansible-base+activitystream","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-django-ansible-base+api_documentation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-django-ansible-base+authentication","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-django-ansible-base+channel_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-django-ansible-base+feature_flags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-django-ansible-base+jwt_consumer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-django-ansible-base+oauth2_provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-django-ansible-base+rbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-django-ansible-base+redis_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-django-ansible-base+rest_filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-django-ansible-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.20260422-2.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.3-1.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.3-1.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el8","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-2.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.5::el8","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-2.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-gateway-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-5.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-gateway-proxy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-5.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-gateway-proxy-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-5.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"automation-gateway-proxy-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.10-5.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-2.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_developer:2.5::el9","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-2.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform_inside:2.5::el9","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-2.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-gateway-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-2.el9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-gateway-proxy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-2.el9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-gateway-proxy-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-2.el9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"automation-gateway-proxy-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-2.el9"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"receptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-2.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.0.0-1.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.0.0-1.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-pyjwt+crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-pyjwt+crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.1-1.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el8","package":"python3.12-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.7-1.el8ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.5::el9","package":"python3.12-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.7-1.el9ap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.18-3.GA_redhat_00001.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.18-3.GA_redhat_00001.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.18-3.GA_redhat_00001.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.18-3.GA_redhat_00001.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.18-3.GA_redhat_00001.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.41-8.SP9_redhat_00001.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-4.SP2_redhat_00004.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-4.SP2_redhat_00004.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-4.SP2_redhat_00004.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-4.SP2_redhat_00004.1.el7eap"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-gateway-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-1.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-gateway-proxy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-1.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-gateway-proxy-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-1.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-gateway-proxy-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.14-1.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"automation-platform-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.7-1.el9ap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"python3.12-pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9ap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"python3.12-pillow-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9ap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.6::el9","package":"python3.12-pillow-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.1-1.el9ap"}]}],"bundled":7},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.6-root.io.1"},{"fixed":"8.12.0-root.io.1"},{"fixed":"8.17.1-root.io.1"},{"fixed":"8.17.1-root.io.2"},{"fixed":"6.12.6-root.io.2"},{"fixed":"8.12.0-root.io.2"},{"fixed":"4.11.8-root.io.1"},{"fixed":"4.11.8-root.io.2"},{"fixed":"6.12.6-root.io.3"},{"fixed":"8.12.0-root.io.3"},{"fixed":"8.17.1-root.io.3"},{"fixed":"8.12.0-root.io.4"},{"fixed":"8.17.1-root.io.4"},{"fixed":"4.11.8-root.io.3"},{"fixed":"5.5.2-root.io.1"},{"fixed":"6.5.2-root.io.1"},{"fixed":"6.5.2-root.io.2"},{"fixed":"5.5.2-root.io.2"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.8-aikido.2"},{"fixed":"6.12.6-aikido.3"},{"fixed":"8.12.0-aikido.3"},{"fixed":"8.17.1-aikido.3"},{"fixed":"8.12.0-aikido.4"},{"fixed":"8.17.1-aikido.4"},{"fixed":"4.11.8-aikido.3"},{"fixed":"5.5.2-aikido.1"},{"fixed":"6.5.2-aikido.1"},{"fixed":"6.5.2-aikido.2"},{"fixed":"5.5.2-aikido.2"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"node-ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"node-ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"node-ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.12.6-2","6.12.6-3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"node-ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.12.6-3","8.12.0~ds+~2.1.1-4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"node-ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.12.0~ds+~2.1.1-5"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"node-ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.17.1~ds+~3.0.1+~3.1.0-4build1","8.20.0~ds+~cs6.1.3-1","8.20.0~ds+~cs7.1.2-1","8.20.0~ds+~cs7.1.3-1","8.20.0~ds+~cs7.1.3-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"node-ajv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.12.0~ds+~2.1.1-5","8.17.1~ds+~3.0.1+~3.1.0-2","8.17.1~ds+~3.0.1+~3.1.0-4build1"]}],"products":[{"vendor":"ajv.js","product":"ajv"},{"vendor":"red hat","product":"confidential compute attestation"},{"vendor":"red hat","product":"cryostat 4"},{"vendor":"red hat","product":"gatekeeper 3"},{"vendor":"red hat","product":"logging subsystem for red hat openshift"},{"vendor":"red hat","product":"multicluster engine for kubernetes"},{"vendor":"red hat","product":"network observability (netobserv) 1.11.0"},{"vendor":"red hat","product":"network observability operator"},{"vendor":"red hat","product":"node healthcheck operator"},{"vendor":"red hat","product":"openshift pipelines"},{"vendor":"red hat","product":"openshift service mesh 2"},{"vendor":"red hat","product":"openshift service mesh 3"},{"vendor":"red hat","product":"red hat 3scale api management platform 2"},{"vendor":"red hat","product":"red hat advanced cluster management for kubernetes 2"},{"vendor":"red hat","product":"red hat advanced cluster security 4"},{"vendor":"red hat","product":"red hat amq broker 7"},{"vendor":"red hat","product":"red hat ansible automation platform 2"},{"vendor":"red hat","product":"red hat ansible automation platform 2.5 for rhel 8"},{"vendor":"red hat","product":"red hat ansible automation platform 2.5 for rhel 9"},{"vendor":"red hat","product":"red hat ansible automation platform 2.6"},{"vendor":"red hat","product":"red hat ansible automation platform 2.6 for rhel 9"},{"vendor":"red hat","product":"red hat build of apache camel - hawtio 4"},{"vendor":"red hat","product":"red hat build of apache camel for spring boot 4"},{"vendor":"red hat","product":"red hat build of apicurio registry 2"},{"vendor":"red hat","product":"red hat build of apicurio registry 3"},{"vendor":"red hat","product":"red hat build of keycloak"},{"vendor":"red hat","product":"red hat build of optaplanner 8"},{"vendor":"red hat","product":"red hat connectivity link 1"},{"vendor":"red hat","product":"red hat data grid 8"},{"vendor":"red hat","product":"red hat developer hub 1.8"},{"vendor":"red hat","product":"red hat developer hub 1.9"},{"vendor":"red hat","product":"red hat directory server 11"},{"vendor":"red hat","product":"red hat directory server 12"},{"vendor":"red hat","product":"red hat directory server 13"},{"vendor":"red hat","product":"red hat edge manager 1.0"},{"vendor":"red hat","product":"red hat edge manager 1.1"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux ai (rhel ai) 3"},{"vendor":"red hat","product":"red hat fuse 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.3 eus for rhel 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 8"},{"vendor":"red hat","product":"red hat jboss enterprise application platform expansion pack"},{"vendor":"red hat","product":"red hat openshift ai (rhoai)"},{"vendor":"red hat","product":"red hat openshift ai 2.16"},{"vendor":"red hat","product":"red hat openshift ai 3.3"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift container platform 4.14"},{"vendor":"red hat","product":"red hat openshift container platform 4.15"},{"vendor":"red hat","product":"red hat openshift container platform 4.16"},{"vendor":"red hat","product":"red hat openshift container platform 4.17"},{"vendor":"red hat","product":"red hat openshift container platform 4.19"},{"vendor":"red hat","product":"red hat openshift data foundation 4.18"},{"vendor":"red hat","product":"red hat openshift data foundation 4.19"},{"vendor":"red hat","product":"red hat openshift data foundation 4.20"},{"vendor":"red hat","product":"red hat openshift dev spaces"},{"vendor":"red hat","product":"red hat openshift dev spaces 3.27"},{"vendor":"red hat","product":"red hat openshift gitops"},{"vendor":"red hat","product":"red hat process automation 7"},{"vendor":"red hat","product":"red hat quay 3.14"},{"vendor":"red hat","product":"red hat quay 3.15"},{"vendor":"red hat","product":"red hat quay 3.16"},{"vendor":"red hat","product":"red hat quay 3.9"},{"vendor":"red hat","product":"red hat satellite 6"},{"vendor":"red hat","product":"red hat satellite 6.18"},{"vendor":"red hat","product":"red hat single sign-on 7"},{"vendor":"red hat","product":"streams for apache kafka 2"},{"vendor":"red hat","product":"streams for apache kafka 3"}],"references":[{"url":"https://github.com/advisories/GHSA-2g4f-4pwh-qvx6","tags":["advisory"]},{"url":"https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv-ReDoS.md","tags":["web","article","report"]},{"url":"https://github.com/github/advisory-database/pull/6991","tags":["fix","web"]},{"url":"https://github.com/ajv-validator/ajv/pull/2588","tags":["fix","web"]},{"url":"https://github.com/ajv-validator/ajv/releases/tag/v6.14.0","tags":["web"]},{"url":"https://github.com/ajv-validator/ajv/pull/2590","tags":["fix","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69873","tags":["vdb-entry","x_refsource_REDHAT","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2439070","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69873.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:33371","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13512","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6277","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:16874","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6309","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9742","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6802","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36651","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:40945","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:40118","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5807","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19712","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:15091","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:14774","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5910","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5907","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:10093","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6192","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:41941","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:41944","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:40984","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7314","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6568","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6497","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6567","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5168","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26214","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26211","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69873","tags":["advisory"]},{"url":"https://github.com/ajv-validator/ajv/pull/2586","tags":["web"]},{"url":"https://github.com/ajv-validator/ajv/commit/720a23fa453ffae8340e92c9b0fe886c54cfe0d5","tags":["web"]},{"url":"https://github.com/ajv-validator/ajv/releases/tag/v8.18.0","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69873.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-69873","tags":["advisory"]},{"url":"https://github.com/ajv-validator/ajv","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/release_notes/patch_releases","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2430472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2438762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2444839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2447194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2456187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458142","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13512.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69534","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69534","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69534","tags":["advisory"]},{"url":"https://github.com/Python-Markdown/markdown","tags":["article"]},{"url":"https://github.com/Python-Markdown/markdown/actions/runs/15736122892","tags":["article"]},{"url":"https://github.com/Python-Markdown/markdown/issues/1534","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69873","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6266","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6266","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6266","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-23490","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-23490","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23490","tags":["advisory"]},{"url":"https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970","tags":["article"]},{"url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2","tags":["article"]},{"url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-25679","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-25679","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25679","tags":["advisory"]},{"url":"https://go.dev/cl/752180","tags":["article"]},{"url":"https://go.dev/issue/77578","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4601","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-26007","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-26007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26007","tags":["advisory"]},{"url":"https://github.com/pyca/cryptography/commit/0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c","tags":["article"]},{"url":"https://github.com/pyca/cryptography/security/advisories/GHSA-r6ph-v2qm-q3c2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27459","tags":["advisory"]},{"url":"https://github.com/pyca/pyopenssl/blob/358cbf29c4e364c59930e53a270116249581eaa3/CHANGELOG.rst","tags":["article"]},{"url":"https://github.com/pyca/pyopenssl/commit/57f09bb4bb051d3bc2a1abd36e9525313d5cd408","tags":["article"]},{"url":"https://github.com/pyca/pyopenssl/security/advisories/GHSA-5pwr-322w-8jr4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27606","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27606","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27606","tags":["advisory"]},{"url":"https://github.com/rollup/rollup/commit/c60770d7aaf750e512c1b2774989ea4596e660b2","tags":["article"]},{"url":"https://github.com/rollup/rollup/commit/c8cf1f9c48c516285758c1e11f08a54f304fd44e","tags":["article"]},{"url":"https://github.com/rollup/rollup/commit/d6dee5e99bb82aac0bee1df4ab9efbde455452c3","tags":["article"]},{"url":"https://github.com/rollup/rollup/releases/tag/v2.80.0","tags":["article"]},{"url":"https://github.com/rollup/rollup/releases/tag/v3.30.0","tags":["article"]},{"url":"https://github.com/rollup/rollup/releases/tag/v4.59.0","tags":["article"]},{"url":"https://github.com/rollup/rollup/security/advisories/GHSA-mw96-cpmx-2vgc","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-29074","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-29074","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-29074","tags":["advisory"]},{"url":"https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-30922","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-30922","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-30922","tags":["advisory"]},{"url":"https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0","tags":["article"]},{"url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-32597","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-32597","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32597","tags":["advisory"]},{"url":"https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-39373","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-39373","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39373","tags":["advisory"]},{"url":"https://github.com/latchset/jwcrypto/security/advisories/GHSA-fjrm-76x2-c4q4","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/index","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html/7.3.0_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2408784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2423194","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-31703","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33004","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33371.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-29371","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-29371","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-29371","tags":["advisory"]},{"url":"https://bitbucket.org/b_c/jose4j/issues/220/vuln-zip-bomb-attack","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-9784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-9784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9784","tags":["advisory"]},{"url":"https://github.com/undertow-io/undertow/pull/1778","tags":["article"]},{"url":"https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final","tags":["article"]},{"url":"https://issues.redhat.com/browse/UNDERTOW-2598","tags":["article"]},{"url":"https://kb.cert.org/vuls/id/767506","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-12543","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-12543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12543","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431740","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13465","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13465","tags":["advisory"]},{"url":"https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-15284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425946","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-15284","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15284","tags":["advisory"]},{"url":"https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9","tags":["article"]},{"url":"https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-23184","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-23184","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23184","tags":["advisory"]},{"url":"https://lists.apache.org/thread/lfs8l63rnctnj2skfrxyys7v8fgnt122","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-23368","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2337621","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-23368","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23368","tags":["advisory"]},{"url":"https://www.gruppotim.it/it/footer/red-team.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418155","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66412","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66412","tags":["advisory"]},{"url":"https://github.com/angular/angular/commit/1c6b0704fb63d051fab8acff84d076abfbc4893a","tags":["article"]},{"url":"https://github.com/angular/angular/security/advisories/GHSA-v4hv-rgfq-gp49","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2430180","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-1002","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1002","tags":["advisory"]},{"url":"https://github.com/eclipse-vertx/vert.x/pull/5895","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-24842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2433645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-24842","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24842","tags":["advisory"]},{"url":"https://github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46","tags":["article"]},{"url":"https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2439170","tags":["report"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/html/release_notes/patch_releases","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2434432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2437111","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2438237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442922","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6277.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61726","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61726","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61726","tags":["advisory"]},{"url":"https://go.dev/cl/736712","tags":["article"]},{"url":"https://go.dev/issue/77101","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4341","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-68121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68121","tags":["advisory"]},{"url":"https://go.dev/cl/737700","tags":["article"]},{"url":"https://go.dev/issue/77217","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/K09ubi9FQFk","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2026-4337","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-25639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-25639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25639","tags":["advisory"]},{"url":"https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57","tags":["article"]},{"url":"https://github.com/axios/axios/releases/tag/v1.13.5","tags":["article"]},{"url":"https://github.com/axios/axios/security/advisories/GHSA-43fc-jf86-j433","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-25990","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-25990","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25990","tags":["advisory"]},{"url":"https://github.com/python-pillow/Pillow/commit/9000313cc5d4a31bdcdd6d7f0781101abab553aa","tags":["article"]},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-cfh3-3jmp-rvhc","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27904","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27904","tags":["advisory"]},{"url":"https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2025-69873","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-69873","description":"ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaScript RegExp() constructor without validation. An attacker can inject a malicious regex pattern (e.g., \"^(a|a)*$\") combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with $data: true for dynamic schema validation. This issue is also fixed in version 6.14.0.","status":"published","published":"2026-02-11T00:00:00Z","modified":"2026-09-14T12:04:32.717Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-1333","CWE-400","CWE-1333"],"updated_at":"2026-11-02T14:32:40.774223Z"}],"euvd":[{"id":"EUVD-2025-207389","description":"ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaScript RegExp() constructor without validation. An attacker can inject a malicious regex pattern (e.g., \"^(a|a)*$\") combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with $data: true for dynamic schema validation. This issue is also fixed in version 6.14.0.","status":"published","published":"2026-02-11T00:00:00Z","modified":"2026-09-14T12:04:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T17:28:21.2136Z"}],"ghsa":[{"id":"GHSA-2g4f-4pwh-qvx6","title":"ajv has ReDoS when using `$data` option","description":"ajv (Another JSON Schema Validator) through version 8.17.1 is vulnerable to Regular Expression Denial of Service (ReDoS) when the `$data` option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax (`$data` reference), which is passed directly to the JavaScript `RegExp()` constructor without validation. An attacker can inject a malicious regex pattern (e.g., `\\\"^(a|a)*$\\\"`) combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with `$data`: true for dynamic schema validation.","status":"published","published":"2026-02-11T21:30:39Z","modified":"2026-03-02T21:58:41Z","cvss":[{"version":"4.0","score":5.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium"}],"cwes":["CWE-400","CWE-1333"],"updated_at":"2026-11-02T14:39:30.031684Z"}],"nvd":[{"id":"CVE-2025-69873","description":"ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaScript RegExp() constructor without validation. An attacker can inject a malicious regex pattern (e.g., \"^(a|a)*$\") combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with $data: true for dynamic schema validation. This issue is also fixed in version 6.14.0.","status":"published","published":"2026-02-11T19:15:50.467Z","modified":"2026-09-10T13:17:29.42Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-1333","CWE-400"],"updated_at":"2026-11-02T14:12:00.273026Z"}],"osv":[{"id":"CVE-2025-69873","description":"ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaScript RegExp() constructor without validation. An attacker can inject a malicious regex pattern (e.g., \"^(a|a)*$\") combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with $data: true for dynamic schema validation. This issue is also fixed in version 6.14.0.","status":"published","published":"2026-02-11T00:00:00Z","modified":"2026-10-28T02:30:56.779575547Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-1333"],"updated_at":"2026-11-02T15:44:52.859856Z"},{"id":"DEBIAN-CVE-2025-69873","description":"ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaScript RegExp() constructor without validation. An attacker can inject a malicious regex pattern (e.g., \"^(a|a)*$\") combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with $data: true for dynamic schema validation. This issue is also fixed in version 6.14.0.","status":"published","published":"2026-02-11T19:15:50.467Z","modified":"2026-09-11T08:47:27.418714403Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:48.025964Z"},{"id":"GHSA-2g4f-4pwh-qvx6","title":"ajv has ReDoS when using `$data` option","description":"ajv (Another JSON Schema Validator) through version 8.17.1 is vulnerable to Regular Expression Denial of Service (ReDoS) when the `$data` option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax (`$data` reference), which is passed directly to the JavaScript `RegExp()` constructor without validation. An attacker can inject a malicious regex pattern (e.g., `\\\"^(a|a)*$\\\"`) combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with `$data`: true for dynamic schema validation.","status":"published","published":"2026-02-11T21:30:39Z","modified":"2026-09-10T03:50:33.716487588Z","cvss":[{"version":"4.0","score":5.5,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium"}],"cwes":["CWE-1333","CWE-400"],"updated_at":"2026-11-02T15:46:34.338541Z"},{"id":"RHSA-2026:13512","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update","status":"published","published":"2026-05-05T10:11:48Z","modified":"2026-10-20T10:04:50Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:33371","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.18 security update","status":"published","published":"2026-06-30T10:49:44Z","modified":"2026-10-20T10:07:22Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:6277","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update","status":"published","published":"2026-04-01T10:07:53Z","modified":"2026-10-20T10:12:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"ROOT-APP-NPM-CVE-2025-69873","title":"CVE-2025-69873 in @rootio/ajv - Patched by Root","description":"Root has patched CVE-2025-69873 in the @rootio/ajv package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-07-27T13:17:49Z","modified":"2026-07-27T19:45:07.916124529Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:27.362922Z"},{"id":"UBUNTU-CVE-2025-69873","description":"ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaScript RegExp() constructor without validation. An attacker can inject a malicious regex pattern (e.g., \"^(a|a)*$\") combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with $data: true for dynamic schema validation. This issue is also fixed in version 6.14.0.","status":"published","published":"2026-02-11T19:15:00Z","modified":"2026-10-27T04:15:24.697687143Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T16:55:55.926217Z"},{"id":"CLSA-2026-1773015259","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 8.12.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:11Z","modified":"2026-10-15T09:45:26.57385103Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1773015260","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 8.17.1-tuxcare.3.","status":"published","published":"2026-08-04T14:52:11Z","modified":"2026-10-15T09:45:42.147376188Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1773015261","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 8.11.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:11Z","modified":"2026-10-15T09:45:42.70531565Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1774398087","title":"TuxCare security update for ajv (2 CVEs)","description":"TuxCare rebuilt ajv to address 2 CVEs. Fixed in 4.11.8-tuxcare.1.","status":"published","published":"2026-08-04T14:52:15Z","modified":"2026-10-15T09:47:04.413911174Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1774570936","title":"TuxCare security update for ajv (2 CVEs)","description":"TuxCare rebuilt ajv to address 2 CVEs. Fixed in 6.14.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:15Z","modified":"2026-10-15T09:47:05.785632881Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1774570946","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 8.9.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:15Z","modified":"2026-10-15T09:47:48.162483751Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1774916723","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 8.6.2-tuxcare.1.","status":"published","published":"2026-08-04T14:52:17Z","modified":"2026-10-15T09:47:48.931757496Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1775003172","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.12.6-tuxcare.1.","status":"published","published":"2026-08-04T14:52:18Z","modified":"2026-10-15T09:47:48.976138357Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776213250","title":"TuxCare security update for ajv (2 CVEs)","description":"TuxCare rebuilt ajv to address 2 CVEs. Fixed in 6.9.1-tuxcare.1.","status":"published","published":"2026-08-04T14:52:25Z","modified":"2026-10-15T09:47:49.78266051Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776818196","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 5.5.2-tuxcare.4.","status":"published","published":"2026-08-04T14:52:27Z","modified":"2026-10-15T09:45:45.521806327Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1779151625","title":"TuxCare security update for ajv (2 CVEs)","description":"TuxCare rebuilt ajv to address 2 CVEs. Fixed in 6.4.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:32Z","modified":"2026-10-15T09:45:28.6598648Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779151627","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.12.4-tuxcare.1.","status":"published","published":"2026-08-04T14:52:32Z","modified":"2026-10-15T09:45:30.297526488Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779151633","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.12.3-tuxcare.1.","status":"published","published":"2026-08-04T14:52:32Z","modified":"2026-10-15T09:47:50.178938661Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1781052732","title":"TuxCare security update for ajv (2 CVEs)","description":"TuxCare rebuilt ajv to address 2 CVEs. Fixed in 6.11.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:36Z","modified":"2026-10-15T09:47:50.395066762Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"CLSA-2026-1787001707","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.10.0-tuxcare.2.","status":"published","published":"2026-08-17T21:21:47Z","modified":"2026-10-15T09:47:11.193809033Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1790161390","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.10.2-tuxcare.2.","status":"published","published":"2026-09-23T11:03:10Z","modified":"2026-10-15T09:47:08.732214871Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790763286","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 8.6.3-tuxcare.1.","status":"published","published":"2026-09-30T10:14:46Z","modified":"2026-10-15T09:47:53.567509287Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1792488470","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 8.11.2-tuxcare.1.","status":"published","published":"2026-10-20T09:27:50Z","modified":"2026-10-20T13:45:11.482675566Z","updated_at":"2026-11-02T15:43:54.378946Z"},{"id":"CLSA-2026-1792766110","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 8.17.1-tuxcare.4.","status":"published","published":"2026-10-23T14:35:10Z","modified":"2026-10-23T19:15:09.939180205Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1793046415","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 8.1.0-tuxcare.1.","status":"published","published":"2026-10-26T20:26:55Z","modified":"2026-10-27T01:45:02.442844417Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1793097555","title":"TuxCare security update for ajv (1 CVE)","description":"TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.5.2-tuxcare.2.","status":"published","published":"2026-10-27T10:39:15Z","modified":"2026-10-27T13:30:07.374826068Z","updated_at":"2026-11-02T15:43:55.34846Z"}]}}