{"id":"CVE-2026-59649","aliases":["DEBIAN-CVE-2026-59649","EUVD-2026-52025","GHSA-r7h8-35pv-fwgx","RHSA-2026:70228","RHSA-2026:70229","RHSA-2026:70230","SUSE-SU-2026:23127-1","SUSE-SU-2026:23150-1","SUSE-SU-2026:3559-1","UBUNTU-CVE-2026-59649","openSUSE-SU-2026:11445-1","openSUSE-SU-2026:21538-1"],"status":"published","title":"OpenPGP user-attribute subpacket length bounded only by JVM max memory","description":"In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/U:Amber","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00493,"percentile":0.42699,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-789"],"published":"2026-08-03T00:44:24Z","modified":"2026-10-28T10:55:40Z","fixes":[{"ecosystem":"Debian:14","package":"bouncycastle","fixed_in":["1.86-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.72-2","1.77-1","1.80-1","1.80-2","1.80-3","1.86-1"]},{"source":"osv","ecosystem":"Debian:13","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.80-3","1.86-1"]},{"source":"osv","ecosystem":"Debian:14","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.86-1"}]}],"versions":["1.80-3"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-jakarta-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-jakarta-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-jakarta-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-jakarta-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-artemis-wildfly-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle-jmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-bouncycastle-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-codemodel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-cryptacular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-1.redhat_00002.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-eap-product-conf-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-eap-product-conf-wildfly-ee-feature-pack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-httpcomponents-asyncclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.5-5.redhat_00008.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-dataformat-yaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-module-jakarta-xmlbind-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jakarta-xml-bind-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxb-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxb-jxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxb-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxb-xjc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jaxbintros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jboss-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.3-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-1.SP2_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jbossws-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jbossws-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.0-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jbossws-jaxws-undertow-httpspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jbossws-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-jsf-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.11-2.SP1_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.25.4-1.redhat_00003.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-neethi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-nimbus-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.37.4-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-parsson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.9-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-relaxng-datatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-rngom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-saaj-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-slf4j-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-txw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.26-2.SP3_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-java-jdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.1-12.GA_redhat_00048.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-ws-commons-XmlSchema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el8","package":"eap8-xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el8eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-jakarta-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-jakarta-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-jakarta-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-jakarta-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-artemis-wildfly-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle-jmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-bouncycastle-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-codemodel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-cryptacular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-1.redhat_00002.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-eap-product-conf-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-eap-product-conf-wildfly-ee-feature-pack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-httpcomponents-asyncclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.5-5.redhat_00008.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-dataformat-yaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-module-jakarta-xmlbind-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jakarta-xml-bind-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxb-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxb-jxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxb-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxb-xjc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jaxbintros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jboss-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.3-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-1.SP2_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jbossws-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jbossws-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.0-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jbossws-jaxws-undertow-httpspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.Final_redhat_00001.1el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jbossws-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-jsf-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.11-2.SP1_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.25.4-1.redhat_00003.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-neethi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-nimbus-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.37.4-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-parsson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.9-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-relaxng-datatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-rngom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-saaj-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-slf4j-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-txw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.26-2.SP3_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-java-jdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.1-12.GA_redhat_00048.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-ws-commons-XmlSchema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el9","package":"eap8-xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el9eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-jakarta-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-jakarta-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-jakarta-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-jakarta-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.40.0-8.redhat_00024.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.SP1_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-artemis-wildfly-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle-jmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-bouncycastle-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.85.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-codemodel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-cryptacular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-1.redhat_00002.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-eap-product-conf-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-eap-product-conf-wildfly-ee-feature-pack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:801.8.0-1.GA_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.54-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-httpcomponents-asyncclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.5-5.redhat_00008.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.22-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-dataformat-yaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-module-jakarta-xmlbind-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.18.9-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jakarta-xml-bind-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.5-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxb-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxb-jxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxb-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxb-xjc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jaxbintros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jboss-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.3-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.31-1.SP2_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jbossws-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jbossws-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.0-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jbossws-jaxws-undertow-httpspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jbossws-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.0-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-jsf-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.11-2.SP1_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.25.4-1.redhat_00003.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-neethi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-native-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-native-epoll-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.136-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-nimbus-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.37.4-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-parsson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.9-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-relaxng-datatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-rngom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-saaj-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-slf4j-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-txw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.26-2.SP3_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.11-1.Final_redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-java-jdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.1-12.GA_redhat_00048.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.8-9.GA_redhat_00006.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-ws-commons-XmlSchema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.2-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-1.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:8.1::el10","package":"eap8-xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.7-4.redhat_00001.1.el10eap"}]}],"bundled":36},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-160000.1.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-160000.1.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-160000.1.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-160000.1.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-150200.3.38.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-150200.3.38.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-150200.3.38.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-150200.3.38.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-150200.3.38.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-150200.3.38.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-150200.3.38.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-150200.3.38.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-150200.3.38.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-150200.3.38.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-150200.3.38.1"}]}],"bundled":32},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.49+dfsg-3ubuntu1","1.51-4ubuntu1","1.51-4ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.57-1","1.58-1","1.59-1","1.59-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.61-1","1.61-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.68-2","1.68-4","1.68-5","1.68-5ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.72-2","1.77-1","1.77-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.80-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.80-3"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-1.1"}]}],"bundled":32},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.85-160000.1.1"}]}],"bundled":32}],"products":[{"vendor":"bouncycastle","product":"bc-java"},{"vendor":"bouncycastle","product":"bcpg-fips"},{"vendor":"bouncycastle","product":"bouncy_castle_for_java_lts"},{"vendor":"legion of the bouncy castle inc.","product":"bc-fja"},{"vendor":"legion of the bouncy castle inc.","product":"bc-java"},{"vendor":"legion of the bouncy castle inc.","product":"bc-lts-java"}],"references":[{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059649","tags":["vendor-advisory","Third Party Advisory","Patch","advisory","report"]},{"url":"https://github.com/bcgit/bc-java/commit/a43c40dc12c3e1c6cbd03c83fe30aaec4029b824","tags":["patch","Patch","fix","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59649","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE-2026-59649","tags":["article"]},{"url":"https://github.com/advisories/GHSA-r7h8-35pv-fwgx"},{"url":"https://www.bouncycastle.org/download/bouncy-castle-java-fips/","tags":["web"]},{"url":"https://www.bouncycastle.org/download/bouncy-castle-java-lts/","tags":["web"]},{"url":"https://www.bouncycastle.org/download/bouncy-castle-java/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59649.json","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java","tags":["package"]},{"url":"https://github.com/bcgit/bc-lts-java","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-59649","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70228","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index","tags":["article"]},{"url":"https://access.redhat.com/articles/7137769","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2455350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2478013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2480729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2483140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2490628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2494771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2505422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2505911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2507482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2510195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2510722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2511026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2521309","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-32314","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-32869","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33162","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33185","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33236","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33237","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33288","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33363","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33405","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33409","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33413","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33449","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33459","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33501","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33579","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33616","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33640","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33683","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33848","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33871","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33904","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33925","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33967","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33968","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-33973","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34018","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34095","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34096","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34111","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34161","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34222","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-34521","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70228.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3505","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3505","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3505","tags":["advisory"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5680","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5680","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5680","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-10832","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-10832","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10832","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-14180","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-14180","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14180","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15554","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15554","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15554","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15555","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15555","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15555","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15560","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15560","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15560","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15561","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15561","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15561","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15562","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15562","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15562","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15563","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15563","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15563","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15565","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15565","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15565","tags":["advisory"]},{"url":"https://cwe.mitre.org/data/definitions/120.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15567","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15567","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15567","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44417","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44417","tags":["advisory"]},{"url":"https://lists.apache.org/thread/bqg6gjy2cx7rfyqjxcpv3jwjvmclvz4o","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46581","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46581","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-49362","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49362","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-49363","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49363","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-49364","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49364","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49364","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-49875","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-49875","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49875","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/06/11/2","tags":["article"]},{"url":"https://lists.apache.org/thread/3kb9w5bg90xcp06fccoz9k3gpsvyy79o","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50632","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50632","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50632","tags":["advisory"]},{"url":"https://lists.apache.org/thread/740ghch5z5y675cn2kzgtyo5k37n6qcw","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-54512","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54512","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54512","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5988","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-54513","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54513","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54513","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5981","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5983","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/pull/5984","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-54515","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54515","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54515","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5962","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/5964","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-55831","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-55831","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55831","tags":["advisory"]},{"url":"https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","tags":["article"]},{"url":"https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6","tags":["article"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","tags":["article"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.2.16.Final","tags":["article"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-55833","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-55833","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55833","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-56745","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-56745","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56745","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-56746","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-56746","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56746","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57967","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57967","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57967","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59649","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59649","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59889","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59889","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59889","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/6060","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/pull/6056","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59899","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59899","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59899","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww","tags":["article"]},{"url":"https://netty.io/news/2026/07/09/4-1-136-Final.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-62243","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-62243","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62243","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-p85m-gvr3-788c","tags":["article"]},{"url":"https://www.vulncheck.com/advisories/netty-through-tls-hostname-verification-bypass","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-68494","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-68494","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68494","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/pull/1611","tags":["article"]},{"url":"https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9","tags":["article"]},{"url":"https://github.com/advisories/GHSA-72hv-8253-57qq","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-18401","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-69152","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-69152","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69152","tags":["advisory"]},{"url":"https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d","tags":["article"]},{"url":"https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac","tags":["article"]},{"url":"https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf","tags":["article"]},{"url":"https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031","tags":["article"]},{"url":"https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-73508","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-73508","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73508","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-mfg7-5gfp-c4w3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-85511","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-85511","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85511","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-86404","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-86404","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86404","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70229","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-33580","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70229.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70230","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-33581","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70230.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623127-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1272700","tags":["report"]},{"url":"https://bugzilla.suse.com/1272701","tags":["report"]},{"url":"https://bugzilla.suse.com/1272702","tags":["report"]},{"url":"https://bugzilla.suse.com/1272703","tags":["report"]},{"url":"https://bugzilla.suse.com/1272704","tags":["report"]},{"url":"https://bugzilla.suse.com/1272705","tags":["report"]},{"url":"https://bugzilla.suse.com/1272707","tags":["report"]},{"url":"https://bugzilla.suse.com/1272708","tags":["report"]},{"url":"https://bugzilla.suse.com/1272709","tags":["report"]},{"url":"https://bugzilla.suse.com/1272710","tags":["report"]},{"url":"https://bugzilla.suse.com/1272711","tags":["report"]},{"url":"https://bugzilla.suse.com/1272712","tags":["report"]},{"url":"https://bugzilla.suse.com/1272713","tags":["report"]},{"url":"https://bugzilla.suse.com/1272714","tags":["report"]},{"url":"https://bugzilla.suse.com/1272715","tags":["report"]},{"url":"https://bugzilla.suse.com/1272716","tags":["report"]},{"url":"https://bugzilla.suse.com/1272717","tags":["report"]},{"url":"https://bugzilla.suse.com/1272718","tags":["report"]},{"url":"https://bugzilla.suse.com/1272719","tags":["report"]},{"url":"https://bugzilla.suse.com/1272720","tags":["report"]},{"url":"https://bugzilla.suse.com/1272721","tags":["report"]},{"url":"https://bugzilla.suse.com/1272722","tags":["report"]},{"url":"https://bugzilla.suse.com/1272723","tags":["report"]},{"url":"https://bugzilla.suse.com/1272724","tags":["report"]},{"url":"https://bugzilla.suse.com/1272725","tags":["report"]},{"url":"https://bugzilla.suse.com/1272726","tags":["report"]},{"url":"https://bugzilla.suse.com/1272727","tags":["report"]},{"url":"https://bugzilla.suse.com/1272728","tags":["report"]},{"url":"https://bugzilla.suse.com/1272729","tags":["report"]},{"url":"https://bugzilla.suse.com/1272730","tags":["report"]},{"url":"https://bugzilla.suse.com/1272731","tags":["report"]},{"url":"https://bugzilla.suse.com/1272732","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-59652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8763","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623150-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263559-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-59649","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-59649","title":"OpenPGP user-attribute subpacket length bounded only by JVM max memory","description":"In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).","status":"published","published":"2026-08-03T00:44:24.3Z","modified":"2026-08-03T13:33:33.251Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/U:Amber","level":"high","assessor":"cna"}],"cwes":["CWE-789"],"updated_at":"2026-11-02T14:19:58.560602Z"}],"euvd":[{"id":"EUVD-2026-52025","description":"In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).","status":"published","published":"2026-08-03T00:44:24Z","modified":"2026-08-03T13:33:33Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/U:Amber","level":"high"}],"updated_at":"2026-11-02T18:02:24.819631Z"}],"ghsa":[{"id":"GHSA-r7h8-35pv-fwgx","title":"In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by...","description":"In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).","status":"published","published":"2026-08-03T03:31:55Z","modified":"2026-09-02T15:35:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber","level":"high"}],"cwes":["CWE-789"],"updated_at":"2026-11-02T15:11:17.291346Z"}],"nvd":[{"id":"CVE-2026-59649","description":"In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).","status":"published","published":"2026-08-03T01:16:45.12Z","modified":"2026-09-02T14:26:57.803Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-789"],"updated_at":"2026-11-02T14:12:34.290716Z"}],"osv":[{"id":"CVE-2026-59649","title":"OpenPGP user-attribute subpacket length bounded only by JVM max memory","description":"In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).","status":"published","published":"2026-08-03T00:44:24.3Z","modified":"2026-10-28T10:55:40.987988426Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/U:Amber","level":"high"}],"cwes":["CWE-789"],"updated_at":"2026-11-02T15:45:12.496548Z"},{"id":"DEBIAN-CVE-2026-59649","description":"In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).","status":"published","published":"2026-08-03T01:16:45.12Z","modified":"2026-10-03T04:00:09.611360654Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:57.932517Z"},{"id":"RHSA-2026:70228","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.8 security update","status":"published","published":"2026-09-23T10:15:18Z","modified":"2026-10-20T10:14:31Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:70229","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.8 security update","status":"published","published":"2026-09-23T10:15:19Z","modified":"2026-10-20T10:14:32Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:70230","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.8 security update","status":"published","published":"2026-09-23T10:15:20Z","modified":"2026-10-20T10:14:33Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"UBUNTU-CVE-2026-59649","description":"In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).","status":"published","published":"2026-08-03T01:16:00Z","modified":"2026-10-17T12:59:14.117889117Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/U:Amber","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:41.911783Z"},{"id":"openSUSE-SU-2026:11445-1","title":"bouncycastle-1.85-1.1 on GA media","description":"These are all security issues fixed in the bouncycastle-1.85-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-04T00:00:00Z","modified":"2026-08-05T18:23:50.972023293Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:21538-1","title":"Security update for bouncycastle","description":"This update for bouncycastle fixes the following issues:\n\nUpdate to 1.85.\n\nSecurity issues fixed:\n\n- CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI (bsc#1272700).\n- CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check (bsc#1272701).\n- CVE-2026-12802: CMS AuthEnvelopedData fails to enforce tag-length on decryption (bsc#1272702).\n- CVE-2026-12803: KCCMBlockCipher MAC does not bind nonce when AAD is absent (bsc#1272703).\n- CVE-2026-12816: IESEngine stream-mode MAC forgery via length-dependent KDF split (bsc#1272704).\n- CVE-2026-12817: OpenPGP AEAD decryption skips final tag on chunk-aligned data (bsc#1272705).\n- CVE-2026-12852: MLS wire decoder allocates attacker-declared opaque length before bounds check (bsc#1272707).\n- CVE-2026-12860: RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path (bsc#1272708).\n- CVE-2026-13506: Lazy ASN.1 sequence forcing resets nesting-depth guard (bsc#1272709).\n- CVE-2026-13586: PKCS#12 MAC and bag-decryption KDF iteration-count bound (bsc#1272710).\n- CVE-2026-14682: Possible OOM from unbounded up-front allocation on a definite-length read (bsc#1272711).\n- CVE-2026-15055: PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input (bsc#1272712).\n- CVE-2026-58059: Quadratic-time escaping when stringifying X.500 distinguished names (bsc#1272713).\n- CVE-2026-58060: HSS public-key level count unbounded, enabling huge allocation on verify (bsc#1272714).\n- CVE-2026-58061: CCM-family modes write plaintext to caller buffer before tag check (bsc#1272715).\n- CVE-2026-58062: Stapled OCSP response accepted without binding to the checked certificate (bsc#1272716).\n- CVE-2026-58063: BCFKS keystore load honours unbounded KDF cost from untrusted file (bsc#1272717).\n- CVE-2026-59638: JSSE hostname verifier CN-fallback enabled by default despite documented opt-in (bsc#1272718).\n- CVE-2026-59639: CMS verifySignatures returns true for SignedData with zero signers (bsc#1272719).\n- CVE-2026-59640: OpenPGP CFB quick-check oracle active on symmetric/session-key paths (bsc#1272720).\n- CVE-2026-59641: S/MIME validator trusts signer-asserted signingTime for path validation (bsc#1272721).\n- CVE-2026-59642: CMS AuthenticatedData content not bound to MAC when authAttrs present (bsc#1272722).\n- CVE-2026-59643: OpenPGP inline-signature policy failures silently ignored (bsc#1272723).\n- CVE-2026-59644: MLS hash-ratchet honours arbitrary 32-bit generation counter from sender (bsc#1272724).\n- CVE-2026-59645: OER parser recurses without depth limit on self-referential IEEE 1609.2 schema (bsc#1272725).\n- CVE-2026-59646: DTLS handshake reassembler allocates buffer from unchecked 24-bit length (bsc#1272726).\n- CVE-2026-59647: CRMF/CMP password-MAC honours unbounded iteration count (bsc#1272727).\n- CVE-2026-59648: OpenPGP Argon2 S2K honours attacker-chosen memory and passes (bsc#1272728).\n- CVE-2026-59649: OpenPGP user-attribute subpacket length bounded only by JVM max memory (bsc#1272729).\n- CVE-2026-59650: MTI/A0 DH agreement exponentiates unvalidated peer value (bsc#1272730).\n- CVE-2026-59651: BKS keystore accepts legacy version with 16-bit integrity MAC key (bsc#1272731).\n- CVE-2026-59652: LDAP filter injection in legacy jdk1.4 LDAPStoreHelper (bsc#1272732).\n\nAdditional notes:\n\n- The standardised PQC algorithms ML-KEM, ML-DSA, SLH-DSA, FrodoKEM, and CMCE have been repackaged under\n  `org.bouncycastle.crypto` and the versions under `org.bouncycastle.crypto.pqc` have been deprecated. These deprecated\n  versions will be removed in BC 1.86.\n","status":"published","published":"2026-08-06T07:36:52Z","modified":"2026-08-08T18:23:57.97616198Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:23127-1","title":"Security update for bouncycastle","description":"This update for bouncycastle fixes the following issues:\n\nUpdate to 1.85.\n\nSecurity issues fixed:\n\n- CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI (bsc#1272700).\n- CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check (bsc#1272701).\n- CVE-2026-12802: CMS AuthEnvelopedData fails to enforce tag-length on decryption (bsc#1272702).\n- CVE-2026-12803: KCCMBlockCipher MAC does not bind nonce when AAD is absent (bsc#1272703).\n- CVE-2026-12816: IESEngine stream-mode MAC forgery via length-dependent KDF split (bsc#1272704).\n- CVE-2026-12817: OpenPGP AEAD decryption skips final tag on chunk-aligned data (bsc#1272705).\n- CVE-2026-12852: MLS wire decoder allocates attacker-declared opaque length before bounds check (bsc#1272707).\n- CVE-2026-12860: RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path (bsc#1272708).\n- CVE-2026-13506: Lazy ASN.1 sequence forcing resets nesting-depth guard (bsc#1272709).\n- CVE-2026-13586: PKCS#12 MAC and bag-decryption KDF iteration-count bound (bsc#1272710).\n- CVE-2026-14682: Possible OOM from unbounded up-front allocation on a definite-length read (bsc#1272711).\n- CVE-2026-15055: PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input (bsc#1272712).\n- CVE-2026-58059: Quadratic-time escaping when stringifying X.500 distinguished names (bsc#1272713).\n- CVE-2026-58060: HSS public-key level count unbounded, enabling huge allocation on verify (bsc#1272714).\n- CVE-2026-58061: CCM-family modes write plaintext to caller buffer before tag check (bsc#1272715).\n- CVE-2026-58062: Stapled OCSP response accepted without binding to the checked certificate (bsc#1272716).\n- CVE-2026-58063: BCFKS keystore load honours unbounded KDF cost from untrusted file (bsc#1272717).\n- CVE-2026-59638: JSSE hostname verifier CN-fallback enabled by default despite documented opt-in (bsc#1272718).\n- CVE-2026-59639: CMS verifySignatures returns true for SignedData with zero signers (bsc#1272719).\n- CVE-2026-59640: OpenPGP CFB quick-check oracle active on symmetric/session-key paths (bsc#1272720).\n- CVE-2026-59641: S/MIME validator trusts signer-asserted signingTime for path validation (bsc#1272721).\n- CVE-2026-59642: CMS AuthenticatedData content not bound to MAC when authAttrs present (bsc#1272722).\n- CVE-2026-59643: OpenPGP inline-signature policy failures silently ignored (bsc#1272723).\n- CVE-2026-59644: MLS hash-ratchet honours arbitrary 32-bit generation counter from sender (bsc#1272724).\n- CVE-2026-59645: OER parser recurses without depth limit on self-referential IEEE 1609.2 schema (bsc#1272725).\n- CVE-2026-59646: DTLS handshake reassembler allocates buffer from unchecked 24-bit length (bsc#1272726).\n- CVE-2026-59647: CRMF/CMP password-MAC honours unbounded iteration count (bsc#1272727).\n- CVE-2026-59648: OpenPGP Argon2 S2K honours attacker-chosen memory and passes (bsc#1272728).\n- CVE-2026-59649: OpenPGP user-attribute subpacket length bounded only by JVM max memory (bsc#1272729).\n- CVE-2026-59650: MTI/A0 DH agreement exponentiates unvalidated peer value (bsc#1272730).\n- CVE-2026-59651: BKS keystore accepts legacy version with 16-bit integrity MAC key (bsc#1272731).\n- CVE-2026-59652: LDAP filter injection in legacy jdk1.4 LDAPStoreHelper (bsc#1272732).\n\nAdditional notes:\n\n- The standardised PQC algorithms ML-KEM, ML-DSA, SLH-DSA, FrodoKEM, and CMCE have been repackaged under\n  `org.bouncycastle.crypto` and the versions under `org.bouncycastle.crypto.pqc` have been deprecated. These deprecated\n  versions will be removed in BC 1.86.\n","status":"published","published":"2026-08-06T07:40:53Z","modified":"2026-08-14T18:23:40.100085124Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23150-1","title":"Security update for bouncycastle","description":"This update for bouncycastle fixes the following issues:\n\nUpdate to 1.85.\n\nSecurity issues fixed:\n\n- CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI (bsc#1272700).\n- CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check (bsc#1272701).\n- CVE-2026-12802: CMS AuthEnvelopedData fails to enforce tag-length on decryption (bsc#1272702).\n- CVE-2026-12803: KCCMBlockCipher MAC does not bind nonce when AAD is absent (bsc#1272703).\n- CVE-2026-12816: IESEngine stream-mode MAC forgery via length-dependent KDF split (bsc#1272704).\n- CVE-2026-12817: OpenPGP AEAD decryption skips final tag on chunk-aligned data (bsc#1272705).\n- CVE-2026-12852: MLS wire decoder allocates attacker-declared opaque length before bounds check (bsc#1272707).\n- CVE-2026-12860: RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path (bsc#1272708).\n- CVE-2026-13506: Lazy ASN.1 sequence forcing resets nesting-depth guard (bsc#1272709).\n- CVE-2026-13586: PKCS#12 MAC and bag-decryption KDF iteration-count bound (bsc#1272710).\n- CVE-2026-14682: Possible OOM from unbounded up-front allocation on a definite-length read (bsc#1272711).\n- CVE-2026-15055: PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input (bsc#1272712).\n- CVE-2026-58059: Quadratic-time escaping when stringifying X.500 distinguished names (bsc#1272713).\n- CVE-2026-58060: HSS public-key level count unbounded, enabling huge allocation on verify (bsc#1272714).\n- CVE-2026-58061: CCM-family modes write plaintext to caller buffer before tag check (bsc#1272715).\n- CVE-2026-58062: Stapled OCSP response accepted without binding to the checked certificate (bsc#1272716).\n- CVE-2026-58063: BCFKS keystore load honours unbounded KDF cost from untrusted file (bsc#1272717).\n- CVE-2026-59638: JSSE hostname verifier CN-fallback enabled by default despite documented opt-in (bsc#1272718).\n- CVE-2026-59639: CMS verifySignatures returns true for SignedData with zero signers (bsc#1272719).\n- CVE-2026-59640: OpenPGP CFB quick-check oracle active on symmetric/session-key paths (bsc#1272720).\n- CVE-2026-59641: S/MIME validator trusts signer-asserted signingTime for path validation (bsc#1272721).\n- CVE-2026-59642: CMS AuthenticatedData content not bound to MAC when authAttrs present (bsc#1272722).\n- CVE-2026-59643: OpenPGP inline-signature policy failures silently ignored (bsc#1272723).\n- CVE-2026-59644: MLS hash-ratchet honours arbitrary 32-bit generation counter from sender (bsc#1272724).\n- CVE-2026-59645: OER parser recurses without depth limit on self-referential IEEE 1609.2 schema (bsc#1272725).\n- CVE-2026-59646: DTLS handshake reassembler allocates buffer from unchecked 24-bit length (bsc#1272726).\n- CVE-2026-59647: CRMF/CMP password-MAC honours unbounded iteration count (bsc#1272727).\n- CVE-2026-59648: OpenPGP Argon2 S2K honours attacker-chosen memory and passes (bsc#1272728).\n- CVE-2026-59649: OpenPGP user-attribute subpacket length bounded only by JVM max memory (bsc#1272729).\n- CVE-2026-59650: MTI/A0 DH agreement exponentiates unvalidated peer value (bsc#1272730).\n- CVE-2026-59651: BKS keystore accepts legacy version with 16-bit integrity MAC key (bsc#1272731).\n- CVE-2026-59652: LDAP filter injection in legacy jdk1.4 LDAPStoreHelper (bsc#1272732).\n\nAdditional notes:\n\n- The standardised PQC algorithms ML-KEM, ML-DSA, SLH-DSA, FrodoKEM, and CMCE have been repackaged under\n  `org.bouncycastle.crypto` and the versions under `org.bouncycastle.crypto.pqc` have been deprecated. These deprecated\n  versions will be removed in BC 1.86.\n","status":"published","published":"2026-08-06T07:40:53Z","modified":"2026-08-14T18:23:41.480791385Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:3559-1","title":"Security update for bouncycastle","description":"This update for bouncycastle fixes the following issues:\n\n- CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI (bsc#1272700).\n- CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check (bsc#1272701).\n- CVE-2026-12802: CMS AuthEnvelopedData fails to enforce tag-length on decryption (bsc#1272702).\n- CVE-2026-12803: KCCMBlockCipher MAC does not bind nonce when AAD is absent (bsc#1272703).\n- CVE-2026-12816: IESEngine stream-mode MAC forgery via length-dependent KDF split (bsc#1272704).\n- CVE-2026-12817: OpenPGP AEAD decryption skips final tag on chunk-aligned data (bsc#1272705).\n- CVE-2026-12852: MLS wire decoder allocates attacker-declared opaque length before bounds check (bsc#1272707).\n- CVE-2026-12860: RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path (bsc#1272708).\n- CVE-2026-13506: Lazy ASN.1 sequence forcing resets nesting-depth guard (bsc#1272709).\n- CVE-2026-13586: PKCS#12 MAC and bag-decryption KDF iteration-count bound (bsc#1272710).\n- CVE-2026-14682: Possible OOM from unbounded up-front allocation on a definite-length read (bsc#1272711).\n- CVE-2026-15055: PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input (bsc#1272712).\n- CVE-2026-58059: Quadratic-time escaping when stringifying X.500 distinguished names (bsc#1272713).\n- CVE-2026-58060: HSS public-key level count unbounded, enabling huge allocation on verify (bsc#1272714).\n- CVE-2026-58061: CCM-family modes write plaintext to caller buffer before tag check (bsc#1272715).\n- CVE-2026-58062: Stapled OCSP response accepted without binding to the checked certificate (bsc#1272716).\n- CVE-2026-58063: BCFKS keystore load honours unbounded KDF cost from untrusted file (bsc#1272717).\n- CVE-2026-59638: JSSE hostname verifier CN-fallback enabled by default despite documented opt-in (bsc#1272718).\n- CVE-2026-59639: CMS verifySignatures returns true for SignedData with zero signers (bsc#1272719).\n- CVE-2026-59640: OpenPGP CFB quick-check oracle active on symmetric/session-key paths (bsc#1272720).\n- CVE-2026-59641: S/MIME validator trusts signer-asserted signingTime for path validation (bsc#1272721).\n- CVE-2026-59642: CMS AuthenticatedData content not bound to MAC when authAttrs present (bsc#1272722).\n- CVE-2026-59643: OpenPGP inline-signature policy failures silently ignored (bsc#1272723).\n- CVE-2026-59644: MLS hash-ratchet honours arbitrary 32-bit generation counter from sender (bsc#1272724).\n- CVE-2026-59645: OER parser recurses without depth limit on self-referential IEEE 1609.2 schema (bsc#1272725).\n- CVE-2026-59646: DTLS handshake reassembler allocates buffer from unchecked 24-bit length (bsc#1272726).\n- CVE-2026-59647: CRMF/CMP password-MAC honours unbounded iteration count (bsc#1272727).\n- CVE-2026-59648: OpenPGP Argon2 S2K honours attacker-chosen memory and passes (bsc#1272728).\n- CVE-2026-59649: OpenPGP user-attribute subpacket length bounded only by JVM max memory (bsc#1272729).\n- CVE-2026-59650: MTI/A0 DH agreement exponentiates unvalidated peer value (bsc#1272730).\n- CVE-2026-59651: BKS keystore accepts legacy version with 16-bit integrity MAC key (bsc#1272731).\n- CVE-2026-59652: LDAP filter injection in legacy jdk1.4 LDAPStoreHelper (bsc#1272732).\n\nChanges for bouncycastle:\n\nUpdate to 1.85:\n  \n  * Additional Notes:\n\n  The standardised PQC algorithms ML-KEM, ML-DSA, SLH-DSA, FrodoKEM, \n  and CMCE have been repackaged under org.bouncycastle.crypto and \n  the versions under org.bouncycastle.crypto.pqc have been deprecated. \n  These deprecated versions will be removed in BC 1.86.\n","status":"published","published":"2026-08-10T18:04:57Z","modified":"2026-08-12T10:45:04.83973265Z","updated_at":"2026-11-02T15:54:05.392906Z"}]}}