{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-25883", "assignerOrgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730", "state": "PUBLISHED", "assignerShortName": "snyk", "dateReserved": "2022-02-24T11:58:25.192Z", "datePublished": "2023-06-21T05:00:03.352Z", "dateUpdated": "2024-08-03T04:49:44.157Z"}, "containers": {"cna": {"metrics": [{"cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P"}}], "credits": [{"value": "Alessio Della Libera - Snyk Research Team", "lang": "en"}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1333", "description": "Regular Expression Denial of Service (ReDoS)", "lang": "en"}]}], "providerMetadata": {"orgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730", "shortName": "snyk", "dateUpdated": "2023-06-21T05:00:03.352Z"}, "descriptions": [{"value": "Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.\r\r\r", "lang": "en"}], "references": [{"url": "https://security.snyk.io/vuln/SNYK-JS-SEMVER-3247795"}, {"url": "https://github.com/npm/node-semver/blob/main/internal/re.js%23L160"}, {"url": "https://github.com/npm/node-semver/blob/main/internal/re.js%23L138"}, {"url": "https://github.com/npm/node-semver/blob/main/classes/range.js%23L97-L104"}, {"url": "https://github.com/npm/node-semver/pull/564"}, {"url": "https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441"}], "affected": [{"product": "semver", "versions": [{"version": "0", "lessThan": "7.5.2", "status": "affected", "versionType": "semver"}], "vendor": "n/a"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T04:49:44.157Z"}, "title": "CVE Program Container", "references": [{"url": "https://security.snyk.io/vuln/SNYK-JS-SEMVER-3247795", "tags": ["x_transferred"]}, {"url": "https://github.com/npm/node-semver/blob/main/internal/re.js%23L160", "tags": ["x_transferred"]}, {"url": "https://github.com/npm/node-semver/blob/main/internal/re.js%23L138", "tags": ["x_transferred"]}, {"url": "https://github.com/npm/node-semver/blob/main/classes/range.js%23L97-L104", "tags": ["x_transferred"]}, {"url": "https://github.com/npm/node-semver/pull/564", "tags": ["x_transferred"]}, {"url": "https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441", "tags": ["x_transferred"]}]}]}}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:npmjs:semver:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "3DBCA81E-C65B-40E4-8274-83F6B4F07217", "versionEndExcluding": "5.7.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:npmjs:semver:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "E9EE5F81-D456-411C-8E1F-9D0D555B6FEF", "versionEndExcluding": "6.3.1", "versionStartIncluding": "6.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:npmjs:semver:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "93EADF33-E83B-43EA-83CF-BC13AA5393EE", "versionEndExcluding": "7.5.2", "versionStartIncluding": "7.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.\r\r\r"}], "id": "CVE-2022-25883", "lastModified": "2023-11-07T03:44:51.993", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "report@snyk.io", "type": "Secondary"}]}, "published": "2023-06-21T05:15:09.060", "references": [{"source": "report@snyk.io", "tags": ["Broken Link"], "url": "https://github.com/npm/node-semver/blob/main/classes/range.js%23L97-L104"}, {"source": "report@snyk.io", "tags": ["Broken Link"], "url": "https://github.com/npm/node-semver/blob/main/internal/re.js%23L138"}, {"source": "report@snyk.io", "tags": ["Broken Link"], "url": "https://github.com/npm/node-semver/blob/main/internal/re.js%23L160"}, {"source": "report@snyk.io", "tags": ["Patch"], "url": "https://github.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441"}, {"source": "report@snyk.io", "tags": ["Patch", "Vendor Advisory"], "url": "https://github.com/npm/node-semver/pull/564"}, {"source": "report@snyk.io", "tags": ["Exploit", "Patch", "Third Party Advisory"], "url": "https://security.snyk.io/vuln/SNYK-JS-SEMVER-3247795"}], "sourceIdentifier": "report@snyk.io", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1333"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-1333"}], "source": "report@snyk.io", "type": "Secondary"}]}

{"affected_release": [{"advisory": "RHSA-2023:5488", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4", "package": "nodejs-semver", "product_name": "EAP 7.4.13", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2024:0719", "cpe": "cpe:/a:redhat:migration_toolkit_runtimes:1.0::el8", "package": "mtr/mtr-web-container-rhel8:1.2-10", "product_name": "Migration Toolkit for Runtimes 1 on RHEL 8", "release_date": "2024-02-07T00:00:00Z"}, {"advisory": "RHSA-2024:0719", "cpe": "cpe:/a:redhat:migration_toolkit_runtimes:1.0::el8", "package": "mtr/mtr-web-executor-container-rhel8:1.2-8", "product_name": "Migration Toolkit for Runtimes 1 on RHEL 8", "release_date": "2024-02-07T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el8", "package": "multicluster-engine/assisted-image-service-rhel8:v2.6.2-5", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 8", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el8", "package": "multicluster-engine/assisted-installer-agent-rhel8:v2.6.2-6", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 8", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el8", "package": "multicluster-engine/assisted-installer-controller-rhel8:v2.6.2-5", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 8", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el8", "package": "multicluster-engine/assisted-installer-rhel8:v2.6.2-5", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 8", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el8", "package": "multicluster-engine/assisted-service-8-rhel8:v2.6.2-6", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 8", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/addon-manager-rhel9:v2.6.2-6", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/assisted-service-9-rhel9:v2.6.2-7", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/backplane-rhel9-operator:v2.6.2-7", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/cluster-api-provider-kubevirt-rhel9:v2.6.2-5", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/cluster-api-rhel9:v2.6.2-6", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/clusterclaims-controller-rhel9:v2.6.2-6", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/cluster-curator-controller-rhel9:v2.6.2-7", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/cluster-image-set-controller-rhel9:v2.6.2-6", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/clusterlifecycle-state-metrics-rhel9:v2.6.2-5", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/cluster-proxy-addon-rhel9:v2.6.2-6", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/cluster-proxy-rhel9:v2.6.2-6", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/discovery-rhel9:v2.6.2-9", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/hive-rhel9:v2.6.2-6", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/hypershift-cli-rhel9:v2.6.2-7", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/hypershift-rhel9-operator:v2.6.2-7", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/image-based-install-rhel9:v2.6.2-22", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/kube-rbac-proxy-mce-rhel9:v2.6.2-5", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/managedcluster-import-controller-rhel9:v2.6.2-5", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/mce-operator-bundle:v2.6.2-13", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/multicloud-manager-rhel9:v2.6.2-5", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/multicluster-engine-cluster-api-provider-agent-rhel9:v2.6.2-6", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/multicluster-engine-console-mce-rhel9:v2.6.2-8", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/multicluster-engine-hypershift-addon-rhel9-operator:v2.6.2-5", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/multicluster-engine-managed-serviceaccount-rhel9:v2.6.2-8", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/must-gather-rhel9:v2.6.2-5", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/placement-rhel9:v2.6.2-6", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/provider-credential-controller-rhel9:v2.6.2-7", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/registration-operator-rhel9:v2.6.2-7", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/registration-rhel9:v2.6.2-7", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2024:5955", "cpe": "cpe:/a:redhat:multicluster_engine:2.6::el9", "package": "multicluster-engine/work-rhel9:v2.6.2-7", "product_name": "multicluster engine for Kubernetes 2.6 for RHEL 9", "release_date": "2024-08-28T00:00:00Z"}, {"advisory": "RHSA-2023:5379", "cpe": "cpe:/a:redhat:network_observ_optr:1.4.0::el9", "package": "network-observability/network-observability-console-plugin-rhel9:v1.4.0-42", "product_name": "NETWORK-OBSERVABILITY-1.4.0-RHEL-9", "release_date": "2023-09-28T00:00:00Z"}, {"advisory": "RHSA-2023:5379", "cpe": "cpe:/a:redhat:network_observ_optr:1.4.0::el9", "package": "network-observability/network-observability-ebpf-agent-rhel9:v1.4.0-42", "product_name": "NETWORK-OBSERVABILITY-1.4.0-RHEL-9", "release_date": "2023-09-28T00:00:00Z"}, {"advisory": "RHSA-2023:5379", "cpe": "cpe:/a:redhat:network_observ_optr:1.4.0::el9", "package": "network-observability/network-observability-flowlogs-pipeline-rhel9:v1.4.0-42", "product_name": "NETWORK-OBSERVABILITY-1.4.0-RHEL-9", "release_date": "2023-09-28T00:00:00Z"}, {"advisory": "RHSA-2023:5379", "cpe": "cpe:/a:redhat:network_observ_optr:1.4.0::el9", "package": "network-observability/network-observability-operator-bundle:1.4.0-55", "product_name": "NETWORK-OBSERVABILITY-1.4.0-RHEL-9", "release_date": "2023-09-28T00:00:00Z"}, {"advisory": "RHSA-2023:5379", "cpe": "cpe:/a:redhat:network_observ_optr:1.4.0::el9", "package": "network-observability/network-observability-rhel9-operator:v1.4.0-42", "product_name": "NETWORK-OBSERVABILITY-1.4.0-RHEL-9", "release_date": "2023-09-28T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/acm-cluster-permission-rhel9:v2.11.2-5", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/acm-governance-policy-addon-controller-rhel9:v2.11.2-6", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/acm-governance-policy-framework-addon-rhel9:v2.11.2-7", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/acm-grafana-rhel9:v2.11.2-4", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/acm-must-gather-rhel9:v2.11.2-5", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/acm-operator-bundle:v2.11.2-18", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/acm-prometheus-config-reloader-rhel9:v2.11.2-7", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/acm-prometheus-rhel9:v2.11.2-6", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/acm-search-indexer-rhel9:v2.11.2-5", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/acm-search-v2-api-rhel9:v2.11.2-5", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/acm-search-v2-rhel9:v2.11.2-5", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/acm-volsync-addon-controller-rhel9:v2.11.2-8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/cert-policy-controller-rhel9:v2.11.2-7", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/cluster-backup-rhel9-operator:v2.11.2-8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/config-policy-controller-rhel9:v2.11.2-8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/console-rhel9:v2.11.2-6", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/endpoint-monitoring-rhel9-operator:v2.11.2-6", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/governance-policy-propagator-rhel9:v2.11.2-6", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/grafana-dashboard-loader-rhel9:v2.11.2-7", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/insights-client-rhel9:v2.11.2-7", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/insights-metrics-rhel9:v2.11.2-7", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/klusterlet-addon-controller-rhel9:v2.11.2-6", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/kube-rbac-proxy-rhel9:v2.11.2-6", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/kube-state-metrics-rhel9:v2.11.2-6", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/memcached-exporter-rhel9:v2.11.2-5", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/memcached-rhel9:v2.11.2-4", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/metrics-collector-rhel9:v2.11.2-7", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/multicloud-integrations-rhel9:v2.11.2-5", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/multiclusterhub-rhel9:v2.11.2-7", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/multicluster-observability-rhel9-operator:v2.11.2-6", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/multicluster-operators-application-rhel9:v2.11.2-5", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/multicluster-operators-channel-rhel9:v2.11.2-6", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/multicluster-operators-subscription-rhel9:v2.11.2-7", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/node-exporter-rhel9:v2.11.2-5", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/observatorium-rhel9:v2.11.2-6", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/observatorium-rhel9-operator:v2.11.2-6", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/prometheus-alertmanager-rhel9:v2.11.2-6", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/prometheus-rhel9:v2.11.2-7", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/rbac-query-proxy-rhel9:v2.11.2-6", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/search-collector-rhel9:v2.11.2-7", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/submariner-addon-rhel9:v2.11.2-9", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/thanos-receive-controller-rhel9:v2.11.2-7", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2024:6044", "cpe": "cpe:/a:redhat:acm:2.11::el9", "impact": "low", "package": "rhacm2/thanos-rhel9:v2.11.2-6", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9", "release_date": "2024-08-29T00:00:00Z"}, {"advisory": "RHSA-2023:5360", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "nodejs:16-8080020230906092006.63b34585", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2023-09-26T00:00:00Z"}, {"advisory": "RHSA-2023:5362", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "nodejs:18-8080020230825111344.63b34585", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2023-09-26T00:00:00Z"}, {"advisory": "RHSA-2023:5361", "cpe": "cpe:/a:redhat:rhel_eus:8.6", "package": "nodejs:16-8060020230906023909.ad008a3a", "product_name": "Red Hat Enterprise Linux 8.6 Extended Update Support", "release_date": "2023-09-26T00:00:00Z"}, {"advisory": "RHSA-2023:5363", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "nodejs:18-9020020230825081254.rhel9", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2023-09-26T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-activemq-artemis-0:2.16.0-15.redhat_00049.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-bouncycastle-0:1.76.0-4.redhat_00001.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-hal-console-0:3.3.19-1.Final_redhat_00001.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-hibernate-0:5.3.31-1.Final_redhat_00001.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-ironjacamar-0:1.5.15-1.Final_redhat_00001.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-jboss-marshalling-0:2.0.13-2.SP1_redhat_00001.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-jboss-modules-0:1.12.2-1.Final_redhat_00001.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-jboss-server-migration-0:1.10.0-31.Final_redhat_00030.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-jboss-xnio-base-0:3.8.10-1.Final_redhat_00001.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-mod_cluster-0:1.4.5-1.Final_redhat_00001.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-netty-0:4.1.94-1.Final_redhat_00001.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-netty-transport-native-epoll-0:4.1.94-1.Final_redhat_00001.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-resteasy-0:3.15.8-1.Final_redhat_00001.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-undertow-0:2.2.26-1.SP1_redhat_00001.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-wildfly-0:7.4.13-8.GA_redhat_00001.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5485", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8", "package": "eap7-wildfly-elytron-0:1.15.20-1.Final_redhat_00001.1.el8eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-activemq-artemis-0:2.16.0-15.redhat_00049.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-bouncycastle-0:1.76.0-4.redhat_00001.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-hal-console-0:3.3.19-1.Final_redhat_00001.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-hibernate-0:5.3.31-1.Final_redhat_00001.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-ironjacamar-0:1.5.15-1.Final_redhat_00001.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-jboss-marshalling-0:2.0.13-2.SP1_redhat_00001.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-jboss-modules-0:1.12.2-1.Final_redhat_00001.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-jboss-server-migration-0:1.10.0-31.Final_redhat_00030.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-jboss-xnio-base-0:3.8.10-1.Final_redhat_00001.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-mod_cluster-0:1.4.5-1.Final_redhat_00001.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-netty-0:4.1.94-1.Final_redhat_00001.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-netty-transport-native-epoll-0:4.1.94-1.Final_redhat_00001.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-resteasy-0:3.15.8-1.Final_redhat_00001.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-undertow-0:2.2.26-1.SP1_redhat_00001.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-wildfly-0:7.4.13-8.GA_redhat_00001.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5486", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9", "package": "eap7-wildfly-elytron-0:1.15.20-1.Final_redhat_00001.1.el9eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9", "release_date": "2023-10-06T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-activemq-artemis-0:2.16.0-15.redhat_00049.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-bouncycastle-0:1.76.0-4.redhat_00001.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-hal-console-0:3.3.19-1.Final_redhat_00001.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-hibernate-0:5.3.31-1.Final_redhat_00001.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-ironjacamar-0:1.5.15-1.Final_redhat_00001.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-jboss-marshalling-0:2.0.13-2.SP1_redhat_00001.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-jboss-modules-0:1.12.2-1.Final_redhat_00001.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-jboss-server-migration-0:1.10.0-31.Final_redhat_00030.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-jboss-xnio-base-0:3.8.10-1.Final_redhat_00001.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-mod_cluster-0:1.4.5-1.Final_redhat_00001.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-netty-0:4.1.94-1.Final_redhat_00001.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-netty-transport-native-epoll-0:4.1.94-1.Final_redhat_00001.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-resteasy-0:3.15.8-1.Final_redhat_00001.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-undertow-0:2.2.26-1.SP1_redhat_00001.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-wildfly-0:7.4.13-8.GA_redhat_00001.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:5484", "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7", "package": "eap7-wildfly-elytron-0:1.15.20-1.Final_redhat_00001.1.el7eap", "product_name": "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7", "release_date": "2023-10-05T00:00:00Z"}, {"advisory": "RHSA-2023:7222", "cpe": "cpe:/a:redhat:rhmt:1.8::el8", "package": "rhmtc/openshift-migration-ui-rhel8:v1.8.2-2", "product_name": "Red Hat Migration Toolkit for Containers 1.8", "release_date": "2023-11-15T00:00:00Z"}, {"advisory": "RHSA-2023:4341", "cpe": "cpe:/a:redhat:logging:5.7::el8", "package": "openshift-logging/logging-view-plugin-rhel8:v5.7.4-4", "product_name": "RHOL-5.7-RHEL-8", "release_date": "2023-08-02T00:00:00Z"}], "bugzilla": {"description": "nodejs-semver: Regular expression denial of service", "id": "2216475", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2216475"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "verified"}, "cwe": "CWE-1333", "details": ["Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.", "A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in node-semver package via the 'new Range' function. This issue could allow an attacker to pass untrusted malicious regex user data as a range, causing the service to excessively consume CPU depending upon the input size, resulting in a denial of service."], "name": "CVE-2022-25883", "package_state": [{"cpe": "cpe:/a:redhat:cryostat:2", "fix_state": "Not affected", "package_name": "nodejs-semver", "product_name": "Cryostat 2"}, {"cpe": "cpe:/a:redhat:logging:5", "fix_state": "Not affected", "package_name": "openshift-logging/kibana6-rhel8", "product_name": "Logging Subsystem for Red Hat OpenShift"}, {"cpe": "cpe:/a:redhat:migration_toolkit_applications:6", "fix_state": "Will not fix", "package_name": "mta/mta-ui-rhel8", "product_name": "Migration Toolkit for Applications 6"}, {"cpe": "cpe:/a:redhat:migration_toolkit_virtualization:2", "fix_state": "Will not fix", "package_name": "migration-toolkit-virtualization/mtv-ui-rhel8", "product_name": "Migration Toolkit for Virtualization"}, {"cpe": "cpe:/a:redhat:openshift_pipelines:1", "fix_state": "Affected", "package_name": "openshift-pipelines/pipelines-hub-ui-rhel8", "product_name": "OpenShift Pipelines"}, {"cpe": "cpe:/a:redhat:serverless:1", "fix_state": "Affected", "package_name": "nodejs-semver", "product_name": "OpenShift Serverless"}, {"cpe": "cpe:/a:redhat:service_mesh:2", "fix_state": "Will not fix", "package_name": "openshift-service-mesh/kiali-rhel8", "product_name": "OpenShift Service Mesh 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "impact": "low", "package_name": "acm-cluster-templates-console-plugin-container", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:acm:2", "fix_state": "Will not fix", "impact": "low", "package_name": "rhacm2/search-api-rhel8", "product_name": "Red Hat Advanced Cluster Management for Kubernetes 2"}, {"cpe": "cpe:/a:redhat:advanced_cluster_security:3", "fix_state": "Will not fix", "impact": "low", "package_name": "advanced-cluster-security/rhacs-main-rhel8", "product_name": "Red Hat Advanced Cluster Security 3"}, {"cpe": "cpe:/a:redhat:ansible_automation_platform:2", "fix_state": "Will not fix", "impact": "low", "package_name": "aap-azure-ui", "product_name": "Red Hat Ansible Automation Platform 2"}, {"cpe": "cpe:/a:redhat:ansible_automation_platform:2", "fix_state": "Will not fix", "impact": "low", "package_name": "automation-controller", "product_name": "Red Hat Ansible Automation Platform 2"}, {"cpe": "cpe:/a:redhat:ansible_automation_platform:2", "fix_state": "Will not fix", "impact": "low", "package_name": "automation-eda-controller", "product_name": "Red Hat Ansible Automation Platform 2"}, {"cpe": "cpe:/a:redhat:service_registry:2", "fix_state": "Not affected", "package_name": "nodejs-semver", "product_name": "Red Hat build of Apicurio Registry"}, {"cpe": "cpe:/a:redhat:optaplanner:::el6", "fix_state": "Will not fix", "package_name": "nodejs-semver", "product_name": "Red Hat build of OptaPlanner 8"}, {"cpe": "cpe:/a:redhat:ceph_storage:4", "fix_state": "Affected", "package_name": "cockpit-ceph-installer", "product_name": "Red Hat Ceph Storage 4"}, {"cpe": "cpe:/a:redhat:certifications:1::el6", "fix_state": "Out of support scope", "package_name": "redhat-certification-backend", "product_name": "Red Hat Certification for Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/a:redhat:certifications:1::el7", "fix_state": "Out of support scope", "package_name": "redhat-certification", "product_name": "Red Hat Certification for Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/a:redhat:jboss_data_grid:8", "fix_state": "Affected", "package_name": "nodejs-semver", "product_name": "Red Hat Data Grid 8"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_brms_platform:7", "fix_state": "Out of support scope", "package_name": "nodejs-semver", "product_name": "Red Hat Decision Manager 7"}, {"cpe": "cpe:/a:redhat:discovery:1.0::el8", "fix_state": "Will not fix", "package_name": "discovery-server-container", "product_name": "Red Hat Discovery"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "389-ds:1.4/389-ds-base", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "cockpit", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "cockpit-appstream", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "cockpit-composer", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "container-tools:rhel8/cockpit-podman", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "grafana", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "mozjs60", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "pcs", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "ruby:3.1/ruby", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "gjs", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "grafana", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Will not fix", "package_name": "nodejs", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Will not fix", "package_name": "nodejs-nodemon", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "pcs", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "polkit", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:integration:1", "fix_state": "Will not fix", "package_name": "nodejs-semver", "product_name": "Red Hat Integration Camel K"}, {"cpe": "cpe:/a:redhat:jboss_data_grid:7", "fix_state": "Out of support scope", "package_name": "nodejs-semver", "product_name": "Red Hat JBoss Data Grid 7"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6", "fix_state": "Out of support scope", "package_name": "nodejs-semver", "product_name": "Red Hat JBoss Enterprise Application Platform 6"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8", "fix_state": "Not affected", "package_name": "nodejs-semver", "product_name": "Red Hat JBoss Enterprise Application Platform 8"}, {"cpe": "cpe:/a:redhat:jbosseapxp", "fix_state": "Affected", "package_name": "nodejs-semver", "product_name": "Red Hat JBoss Enterprise Application Platform Expansion Pack"}, {"cpe": "cpe:/a:redhat:jboss_fuse:7", "fix_state": "Out of support scope", "package_name": "nodejs-semver", "product_name": "Red Hat JBoss Fuse 7"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Out of support scope", "package_name": "openshift3/ose-console", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Will not fix", "package_name": "openshift4/ose-console", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift_container_storage:4", "fix_state": "Out of support scope", "package_name": "ocs4/mcg-core-rhel8", "product_name": "Red Hat Openshift Container Storage 4"}, {"cpe": "cpe:/a:redhat:openshift_data_foundation:4", "fix_state": "Affected", "package_name": "odf4/mcg-core-rhel8", "product_name": "Red Hat Openshift Data Foundation 4"}, {"cpe": "cpe:/a:redhat:openshift_data_foundation:4", "fix_state": "Affected", "package_name": "odf4/odf-console-rhel8", "product_name": "Red Hat Openshift Data Foundation 4"}, {"cpe": "cpe:/a:redhat:openshift_data_science", "fix_state": "Affected", "package_name": "rhods/odh-dashboard-rhel8", "product_name": "Red Hat OpenShift Data Science (RHODS)"}, {"cpe": "cpe:/a:redhat:openshift_devspaces:3::el8", "fix_state": "Affected", "package_name": "devspaces/code-rhel8", "product_name": "Red Hat OpenShift Dev Spaces"}, {"cpe": "cpe:/a:redhat:openshift_devspaces:3::el8", "fix_state": "Affected", "package_name": "devspaces/traefik-rhel8", "product_name": "Red Hat OpenShift Dev Spaces"}, {"cpe": "cpe:/a:redhat:openshift_distributed_tracing:2", "fix_state": "Affected", "package_name": "rhosdt/jaeger-agent-rhel8", "product_name": "Red Hat OpenShift distributed tracing 2"}, {"cpe": "cpe:/a:redhat:openshift_gitops:1", "fix_state": "Affected", "package_name": "openshift-gitops-1/argocd-rhel8", "product_name": "Red Hat OpenShift GitOps"}, {"cpe": "cpe:/a:redhat:openshift_gitops:1", "fix_state": "Affected", "package_name": "openshift-gitops-1/console-plugin-rhel8", "product_name": "Red Hat OpenShift GitOps"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Affected", "package_name": "container-native-virtualization/kubevirt-console-plugin", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Affected", "package_name": "container-native-virtualization/kubevirt-console-plugin-rhel9", "product_name": "Red Hat OpenShift Virtualization 4"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_bpms_platform:7", "fix_state": "Out of support scope", "package_name": "nodejs-semver", "product_name": "Red Hat Process Automation 7"}, {"cpe": "cpe:/a:redhat:quay:3", "fix_state": "Affected", "package_name": "quay/quay-rhel8", "product_name": "Red Hat Quay 3"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Not affected", "package_name": "nodejs-babel-cli", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Not affected", "package_name": "nodejs-babel-core", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Not affected", "package_name": "nodejs-babel-loader", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Not affected", "package_name": "nodejs-babel-preset-env", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Not affected", "package_name": "nodejs-node-gyp", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Not affected", "package_name": "nodejs-node-sass", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Not affected", "package_name": "nodejs-theforeman-builder", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Not affected", "package_name": "nodejs-webpack", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Not affected", "package_name": "satellite:el8/rubygem-rabl", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:satellite:6", "fix_state": "Not affected", "package_name": "tfm-rubygem-rabl", "product_name": "Red Hat Satellite 6"}, {"cpe": "cpe:/a:redhat:red_hat_single_sign_on:7", "fix_state": "Will not fix", "package_name": "nodejs-semver", "product_name": "Red Hat Single Sign-On 7"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:3", "fix_state": "Will not fix", "package_name": "rh-nodejs14-nodejs", "product_name": "Red Hat Software Collections"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:3", "fix_state": "Will not fix", "package_name": "rh-nodejs14-nodejs-nodemon", "product_name": "Red Hat Software Collections"}, {"cpe": "cpe:/o:redhat:rhev_hypervisor:4", "fix_state": "Will not fix", "package_name": "ovirt-web-ui", "product_name": "Red Hat Virtualization 4"}], "public_date": "2023-06-21T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2022-25883\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-25883\nhttps://github.com/advisories/GHSA-c2qf-rxjj-qqgw\nhttps://security.snyk.io/vuln/SNYK-JS-SEMVER-3247795"], "statement": "Red Hat Advanced Cluster Management for Kubernetes-2 and Red Hat Advanced Cluster Security-3 has been marked as Low severity because node-semver is a Dev dependency for those, used only during the build process, and not used in customer environments.\nIn Red Hat Advanced Cluster Management for Kubernetes (RHACM) the server-regexp dependency is protected by OAuth what is reducing impact by this flaw to Low.", "threat_severity": "Moderate", "upstream_fix": "node-semver 7.5.2, node-semver 6.3.1, node-semver 5.7.2"}