CVE-2026-33815
Full vulnerability record from the local CVENow database.
Description
Memory-safety vulnerability in github.com/jackc/pgx/v5.
Severity
CRITICAL
CVSS score
9.8
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2026-04-07 16:16:24.813000
Last modified
2026-10-26 22:10:00.163000
View original CVE JSON
{
"id": "CVE-2026-33815",
"sourceIdentifier": "[email protected]",
"published": "2026-04-07T16:16:24.813",
"lastModified": "2026-10-26T22:10:00.163",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Memory-safety vulnerability in github.com/jackc/pgx/v5."
},
{
"lang": "es",
"value": "Vulnerabilidad de seguridad de memoria en github.com/jackc/pgx/v5."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "github.com/jackc/pgx/v5",
"product": "github.com/jackc/pgx/v5/pgproto3",
"defaultStatus": "unaffected",
"collectionURL": "https://pkg.go.dev",
"packageName": "github.com/jackc/pgx/v5/pgproto3",
"programRoutines": [
{
"name": "Bind.Decode"
},
{
"name": "Backend.Receive"
}
],
"versions": [
{
"version": "0",
"lessThan": "5.9.0",
"versionType": "semver",
"status": "affected"
}
]
}
]
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"affectedData": [
{
"vendor": "Red Hat",
"product": "Cryostat 4 on RHEL 9",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "cryostat/cryostat-storage-rhel9",
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"versions": [
{
"version": "4.2.0-13",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "RHEM 1.0 for RHEL 9",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "flightctl",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"versions": [
{
"version": "0:1.0.3-1.el9em",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "RHEM 1.1 for RHEL 10",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "flightctl",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"versions": [
{
"version": "0:1.1.3-1.el10em",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "RHEM 1.1 for RHEL 9",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "flightctl",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"versions": [
{
"version": "0:1.1.3-1.el9em",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Custom Metric Autoscaler 2.19",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
],
"versions": [
{
"version": "1780101236",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Custom Metric Autoscaler 2.19",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
],
"versions": [
{
"version": "1780101226",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Custom Metric Autoscaler 2.19",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
],
"versions": [
{
"version": "1780101239",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Custom Metric Autoscaler 2.19",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
],
"versions": [
{
"version": "1779953535",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub 1.3.4",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.3::el9"
],
"versions": [
{
"version": "1779210675",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub 1.3.4",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.3::el9"
],
"versions": [
{
"version": "1779210608",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub 1.3.4",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "multicluster-globalhub/multicluster-globalhub-rhel9-operator",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.3::el9"
],
"versions": [
{
"version": "1779209992",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub 1.7.0",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.7::el9"
],
"versions": [
{
"version": "1779925273",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhacm2/acm-grafana-rhel9",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"versions": [
{
"version": "1787645355",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhacm2/acm-grafana-rhel9",
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"versions": [
{
"version": "1780677003",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhacm2/acm-grafana-rhel9",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"versions": [
{
"version": "1780926805",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Security 4.8",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"versions": [
{
"version": "1777307791",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Security 4.8",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"versions": [
{
"version": "1777307791",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Security 4.8",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"versions": [
{
"version": "1777307791",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Security 4.9",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"versions": [
{
"version": "1777986630",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Security 4.9",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"versions": [
{
"version": "1777986630",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Security 4.9",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"versions": [
{
"version": "1777986630",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"versions": [
{
"version": "1777976489",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"versions": [
{
"version": "1777976489",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"versions": [
{
"version": "1777976489",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/cephcsi-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1783667125",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/cephcsi-rhel9-operator",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1783666755",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/mcg-core-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1784054598",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/mcg-rhel9-operator",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1784055387",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/ocs-client-console-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1784055726",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/ocs-client-rhel9-operator",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1783667517",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1783667577",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/ocs-rhel9-operator",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1783667611",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/odf-cli-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1784055020",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1783667641",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/odf-console-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1784055586",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1783667790",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1783667859",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1783667875",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/odf-external-snapshotter-rhel9-operator",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1783667869",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1783667877",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/odf-multicluster-console-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1784055576",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1784055244",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/odf-must-gather-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1784055382",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/odf-rhel9-operator",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1783668266",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/odr-rhel9-operator",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1783668288",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Openshift Data Foundation 4.20",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "odf4/rook-ceph-rhel9-operator",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"versions": [
{
"version": "1783669219",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Trusted Artifact Signer 1.3",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhtas/createtree-rhel9",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"versions": [
{
"version": "1780053572",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Trusted Artifact Signer 1.3",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhtas/certificate-transparency-rhel9",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"versions": [
{
"version": "1780048814",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Trusted Artifact Signer 1.3",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhtas/trillian-database-rhel9",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"versions": [
{
"version": "1780053572",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Trusted Artifact Signer 1.3",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhtas/trillian-logserver-rhel9",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"versions": [
{
"version": "1780053572",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Trusted Artifact Signer 1.3",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhtas/trillian-logsigner-rhel9",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"versions": [
{
"version": "1780053572",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Trusted Artifact Signer 1.3",
"defaultStatus": "affected",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhtas/updatetree-rhel9",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"versions": [
{
"version": "1780053572",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Red Hat",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/keda-adapter",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
]
},
{
"vendor": "Red Hat",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/keda-operator",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
]
},
{
"vendor": "Red Hat",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/keda-webhooks",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Engine for Kubernetes",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Engine for Kubernetes",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/azure-service-operator-mce-211",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel8",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel8",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "multicluster-globalhub/multicluster-globalhub-operator-bundle",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "multicluster-globalhub/multicluster-globalhub-rhel8-operator",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/multicluster-global-hub-agent-globalhub-1-4",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/multicluster-global-hub-agent-globalhub-1-5",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/multicluster-global-hub-agent-globalhub-1-6",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/multicluster-global-hub-agent-globalhub-1-7",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/multicluster-global-hub-manager-globalhub-1-4",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/multicluster-global-hub-manager-globalhub-1-5",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/multicluster-global-hub-manager-globalhub-1-6",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/multicluster-global-hub-manager-globalhub-1-7",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/multicluster-global-hub-operator-globalhub-1-4",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/multicluster-global-hub-operator-globalhub-1-5",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/multicluster-global-hub-operator-globalhub-1-6",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "Multicluster Global Hub",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/multicluster-global-hub-operator-globalhub-1-7",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
]
},
{
"vendor": "Red Hat",
"product": "OpenShift Pipelines",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-pipelines/pipelines-results-api-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
]
},
{
"vendor": "Red Hat",
"product": "OpenShift Pipelines",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-pipelines/pipelines-results-retention-policy-agent-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat 3scale API Management Platform 2",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "3scale-amp2/3scale-operator-bundle",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat 3scale API Management Platform 2",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "3scale-amp2/3scale-rhel7-operator",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat 3scale API Management Platform 2",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "3scale-amp2/3scale-rhel9-operator",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Security 4",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhacs-eng/release-operator",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Security 4",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhacs-eng/release-roxctl",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Advanced Cluster Security 4",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhacs-eng/release-scanner-v4",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Edge Manager 1",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/flightctl-alert-exporter",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Edge Manager 1",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/flightctl-alertmanager-proxy",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Edge Manager 1",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/flightctl-api",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Edge Manager 1",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/flightctl-cli-artifacts",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Edge Manager 1",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/flightctl-db-setup",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Edge Manager 1",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/flightctl-pam-issuer",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Edge Manager 1",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/flightctl-periodic",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Edge Manager 1",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/flightctl-telemetry-gateway",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Edge Manager 1",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/flightctl-userinfo-proxy",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Edge Manager 1",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/flightctl-worker",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 10",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "go-fdo-server",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Hardened Images",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "caddy",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Hardened Images",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "go-fdo-server",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift AI (RHOAI)",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhoai/odh-maas-api-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_ai"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift AI (RHOAI)",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_ai"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift AI (RHOAI)",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_ai"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift AI (RHOAI)",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_ai"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift AI (RHOAI)",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_ai"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift AI (RHOAI)",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_ai"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift AI (RHOAI)",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rhoai/odh-model-registry-rhel9",
"cpes": [
"cpe:/a:redhat:openshift_ai"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Quay 3",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/quay-clair-v3-17",
"cpes": [
"cpe:/a:redhat:quay:3"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Trusted Artifact Signer",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "securesign/trillian-createtree",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Trusted Artifact Signer",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "securesign/trillian-database",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Trusted Artifact Signer",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "securesign/trillian-logserver",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Trusted Artifact Signer",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "securesign/trillian-logsigner",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
]
},
{
"vendor": "Red Hat",
"product": "Red Hat Trusted Artifact Signer",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "securesign/trillian-updatetree",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
]
},
{
"vendor": "Red Hat",
"product": "Zero Trust Workload Identity Manager",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/spiffe-spire-agent-1-13-3",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
]
},
{
"vendor": "Red Hat",
"product": "Zero Trust Workload Identity Manager",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/spiffe-spire-oidc-discovery-provider-1-13-3",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
]
},
{
"vendor": "Red Hat",
"product": "Zero Trust Workload Identity Manager",
"defaultStatus": "unaffected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/spiffe-spire-server-1-13-3",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
]
},
{
"vendor": "Red Hat",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/spiffe-spire-agent-1-12-4",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
]
},
{
"vendor": "Red Hat",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/spiffe-spire-oidc-discovery-provider-1-12-4",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
]
},
{
"vendor": "Red Hat",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"defaultStatus": "affected",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "redhat-user-workloads/spiffe-spire-server-1-12-4",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 5.5
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-04-09T14:21:42.714758Z",
"id": "CVE-2026-33815",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
},
{
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:jackc:pgx:*:*:*:*:*:go:*:*",
"matchCriteriaId": "81D42EBE-044D-46BF-B4CB-F3A92CF837C7"
}
]
}
]
}
],
"references": [
{
"url": "https://pkg.go.dev/vuln/GO-2026-4771",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:11070",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:11217",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:13791",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:13829",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:17789",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:22423",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:24475",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:24479",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:24482",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:24503",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:24539",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:25273",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:26636",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:36796",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:40984",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:41019",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:60388",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2026-33815",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
},
{
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33815.json",
"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"
}
]
}