{"id":"EUVD-2026-58630","enisaUuid":"fd9712bf-cc96-38eb-bf59-d2d1cc81cd9e","description":"go-chi chi versions \u003e\u003d 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first (leftmost) value of the X-Forwarded-For HTTP header. A remote attacker can bypass IP-based access control lists and rate-limiting mechanisms, and forge log entries, by supplying a spoofed IP address in the X-Forwarded-For header. The issue is fixed in version 5.3.0.","datePublished":"Aug 14, 2026, 11:35:27 AM","dateUpdated":"Oct 8, 2026, 3:24:31 PM","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/go-chi/chi/security/advisories/GHSA-3fxj-6jh8-hvhx\nhttps://www.vulncheck.com/advisories/go-chi-chi-ip-spoofing-via-x-forwarded-for-header\n","aliases":"CVE-2026-72815\nGHSA-qgxv-hqxp-4rcx\n","assigner":"VulnCheck","epss":0.5,"enisaIdProduct":[{"id":"446aeab6-81be-3625-8657-8570d1e9e8d8","product":{"name":"chi","vendor":{"name":"go-chi"}},"product_version":"5.2.1 \u003c5.3.0"}],"enisaIdVendor":[{"id":"717f2e74-d51c-3844-b9f8-16a9d4810b85","vendor":{"name":"go-chi"}}],"enisaIdVulnerability":[{"id":"8bffea66-a182-3597-b5e6-34635c96b097","vulnerability":{"id":"GHSA-qgxv-hqxp-4rcx","description":"go-chi chi versions \u003e\u003d 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first (leftmost) value of the X-Forwarded-For HTTP header. A remote attacker can bypass IP-based access control lists and rate-limiting mechanisms, and forge log entries, by supplying a spoofed IP address in the X-Forwarded-For header. The issue is fixed in version 5.3.0.","datePublished":"Aug 14, 2026, 12:31:25 PM","dateUpdated":"Aug 14, 2026, 12:31:25 PM","baseScore":0.0,"references":"https://github.com/go-chi/chi/security/advisories/GHSA-3fxj-6jh8-hvhx\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-72815\nhttps://www.vulncheck.com/advisories/go-chi-chi-ip-spoofing-via-x-forwarded-for-header\n","enisa_id":"EUVD-2026-58630\n","aliases":"CVE-2026-72815\nGHSA-qgxv-hqxp-4rcx\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:03:49 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"bbcbde0f-b07f-3a64-bc0f-d23be0ec246b","vulnerability":{"id":"CVE-2026-72815","description":"go-chi chi versions \u003e\u003d 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first (leftmost) value of the X-Forwarded-For HTTP header. A remote attacker can bypass IP-based access control lists and rate-limiting mechanisms, and forge log entries, by supplying a spoofed IP address in the X-Forwarded-For header. The issue is fixed in version 5.3.0.","datePublished":"Aug 14, 2026, 11:35:27 AM","dateUpdated":"Oct 8, 2026, 3:24:31 PM","status":"PUBLISHED","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/go-chi/chi/security/advisories/GHSA-3fxj-6jh8-hvhx\nhttps://www.vulncheck.com/advisories/go-chi-chi-ip-spoofing-via-x-forwarded-for-header\n","enisa_id":"EUVD-2026-58630\n","assigner":"VulnCheck","epss":0.5,"dataProcessed":"Nov 7, 2026, 7:17:22 AM","vulnerabilityProduct":[{"id":"b8bf7dd1-5811-368c-9f4a-fa72ab3490ca","product":{"name":"chi","vendor":{"name":"go-chi"}},"product_version":"5.2.1 \u003c5.3.0"}],"vulnerabilityVendor":[{"id":"0460b3ed-0e21-3d1a-9fba-317a5323df89","vendor":{"name":"go-chi"}}]}}],"enisaIdAdvisory":[{"id":"0ec80984-01f8-382f-be22-d5173ab1deb7","advisory":{"id":"openSUSE-SU-2026:21793-1","description":"Security update for hauler","summary":"Security update for hauler","datePublished":"Sep 3, 2026, 12:32:31 PM","dateUpdated":"Sep 17, 2026, 5:43:58 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21793-1.json\nhttps://bugzilla.suse.com/1265425\nhttps://bugzilla.suse.com/1276124\nhttps://bugzilla.suse.com/1276651\nhttps://bugzilla.suse.com/1277965\nhttps://www.suse.com/security/cve/CVE-2026-37236/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72816/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-37236\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"49894494-6840-373a-b223-74071c7f039a","product":{"name":"hauler-0:2.1.0-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"5bec76f5-9dcf-3bfa-bae7-b066fe8ce53b","product":{"name":"hauler-0:2.1.0-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"d9ee0cc9-0cd0-3cee-8163-8584803916d5","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}}]}},{"id":"2ed6bdc4-205f-36aa-99b8-61df7c7a4711","advisory":{"id":"openSUSE-SU-2026:21918-1","description":"Security update for warewulf4","summary":"Security update for warewulf4","datePublished":"Sep 18, 2026, 10:51:38 AM","dateUpdated":"Sep 24, 2026, 5:48:21 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21918-1.json\nhttps://bugzilla.suse.com/1262805\nhttps://bugzilla.suse.com/1276100\nhttps://www.suse.com/security/cve/CVE-2026-34986/\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72816/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-34986\nCVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0c4f167c-7604-3b6c-8027-40bb59244797","product":{"name":"warewulf4-0:4.7.1-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"13592195-acb2-3f20-918d-df5e0b2c3c74","product":{"name":"warewulf4-overlay-rke2-0:4.7.1-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"19bd16be-f20e-3e43-8599-ba5ae38d0aa3","product":{"name":"warewulf4-man-0:4.7.1-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"6d8216c2-4223-3872-a891-3336c7788255","product":{"name":"warewulf4-reference-doc-0:4.7.1-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"6e5f1f6e-d91c-3bf8-9144-475135abc87a","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"97c32106-2a99-3242-9dad-c688e6e46e81","product":{"name":"warewulf4-overlay-0:4.7.1-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b6887f85-9e63-3767-b7d3-98aa0d3837fd","product":{"name":"warewulf4-0:4.7.1-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"d8790b0d-3b46-3e4e-9982-b394dabb9456","product":{"name":"warewulf4-dracut-0:4.7.1-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"e1e47721-40a4-337f-b5c9-86c517c15d57","product":{"name":"warewulf4-overlay-0:4.7.1-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"4760e986-13ac-311d-a442-210dc329f345","advisory":{"id":"RHSA-2026:50287","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Aug 4, 2026, 4:47:41 PM","dateUpdated":"Oct 30, 2026, 6:47:32 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:50287\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50287.json\n","aliases":"CVE-2026-69153\nCVE-2026-72815\nCVE-2026-73086\nCVE-2026-73646\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0979ef99-6312-35cd-b00a-4e33187d5083","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"0ff675ae-2fad-3255-8121-9ce5088c4faa","product":{"name":"prometheus3-13-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"2d7a68e1-bd25-34a2-b559-eb02c5221450","product":{"name":"prometheus3.13-0:3.13.2-0.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"5521374f-1ec6-3f93-8caa-0d0366daad41","product":{"name":"prometheus3.13-0:3.13.2-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"ab53d171-613b-3bdb-8c3a-b456faeb8356","product":{"name":"prometheus3.13-0:3.13.2-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"cf643ad5-4346-38fe-8c3f-6286e1ec29d5","product":{"name":"prometheus3-13-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"f7801212-36c9-3114-88a8-94763989671a","product":{"name":"prometheus3-13-main@src","vendor":{"name":"Red Hat"}}}]}},{"id":"4853b4ed-463d-3d70-a3f2-a2b3f32a6da5","advisory":{"id":"openSUSE-SU-2026:21645-1","description":"Security update for trivy","summary":"Security update for trivy","datePublished":"Aug 25, 2026, 7:22:37 AM","dateUpdated":"Sep 17, 2026, 5:42:31 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21645-1.json\nhttps://bugzilla.suse.com/1276128\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72816/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0da1372b-ba62-3353-8c2e-0051c3ccdb6b","product":{"name":"trivy-0:0.74.0-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"93b4a60b-b02c-3788-958f-2b558a85e537","product":{"name":"trivy-0:0.74.0-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"9d73d383-09e4-31d9-953a-2f0c40600046","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"acb0a0b4-4f38-350a-bd64-796e77e586bc","product":{"name":"trivy-0:0.74.0-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"d8497427-9c4d-3226-918c-77875e316870","product":{"name":"trivy-0:0.74.0-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"4951f210-2bac-3884-99b2-6c7e989c7819","advisory":{"id":"openSUSE-SU-2026:11810-1","description":"warewulf4-4.7.1-1.1 on GA media","summary":"warewulf4-4.7.1-1.1 on GA media","datePublished":"Sep 17, 2026, 12:00:00 AM","dateUpdated":"Sep 18, 2026, 9:18:27 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11810-1.json\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-72815\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"16ad083d-af51-3617-a2ba-f0b243a33b4e","product":{"name":"warewulf4-overlay-0:4.7.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"1ef65020-f3e3-375e-8e81-cda9a44d7729","product":{"name":"warewulf4-overlay-rke2-0:4.7.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"214a0a9c-da78-30ed-b510-3eb748bdbb10","product":{"name":"warewulf4-dracut-0:4.7.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"29b13315-cb3b-3e7d-8086-70bfe33f02f7","product":{"name":"warewulf4-0:4.7.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"364c1f5d-30bd-3dee-b171-3e1636dbfe24","product":{"name":"warewulf4-man-0:4.7.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"3c34ed9c-698f-390b-bcf9-14f195ebbff2","product":{"name":"warewulf4-overlay-0:4.7.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"5f4e2749-c8cb-3a88-a46c-e6b7aa50c911","product":{"name":"warewulf4-dracut-0:4.7.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"61c806d6-e6c4-39d3-86a6-84044fb28a6e","product":{"name":"warewulf4-overlay-0:4.7.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"63ac6e00-feb6-316f-a380-31c8a642a0a6","product":{"name":"warewulf4-overlay-rke2-0:4.7.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"668d6583-a431-311e-9550-abb93da3afa2","product":{"name":"warewulf4-0:4.7.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"6e1d13f4-fe4d-3ab6-8f2c-f5f2458eeeea","product":{"name":"warewulf4-man-0:4.7.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"894e0366-912f-30ff-92cc-608d0d6195a2","product":{"name":"warewulf4-dracut-0:4.7.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"90ed836f-8a77-3b59-9c49-02ef3f4b531b","product":{"name":"warewulf4-0:4.7.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"912d992e-8cb1-310e-a9c9-6f76de8dd812","product":{"name":"warewulf4-dracut-0:4.7.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"963d65ee-31db-3130-a11b-afdae9adac0e","product":{"name":"warewulf4-man-0:4.7.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"98966abb-749c-36fe-8042-82cbcfc170e3","product":{"name":"warewulf4-man-0:4.7.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"ab05040f-7661-3e8b-be60-9f95afd3783e","product":{"name":"warewulf4-overlay-0:4.7.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b8a9d935-078a-39f3-b063-ab65d0e86f94","product":{"name":"warewulf4-overlay-rke2-0:4.7.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"c09a0a0a-9b47-3660-bbc6-abafb3e39147","product":{"name":"warewulf4-reference-doc-0:4.7.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"cbcf435d-9b2e-3a19-89ae-ffedc2311398","product":{"name":"warewulf4-reference-doc-0:4.7.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"dfd59d59-dcbe-39c1-877e-c1882957b00e","product":{"name":"warewulf4-0:4.7.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"e48d743f-88c7-35ad-be94-2cd05e168bfc","product":{"name":"warewulf4-overlay-rke2-0:4.7.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"ef30979e-71c1-3eea-be3e-62dd66627512","product":{"name":"warewulf4-reference-doc-0:4.7.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f592e14a-595d-3dbe-935e-7d20ba8c788a","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"f90afe64-50a5-3539-a596-83be079e7349","product":{"name":"warewulf4-reference-doc-0:4.7.1-1.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"4c04b197-5f29-3639-8d24-fbd8c3a60008","advisory":{"id":"openSUSE-SU-2026:11607-1","description":"cloudflared-2026.8.2-1.1 on GA media","summary":"cloudflared-2026.8.2-1.1 on GA media","datePublished":"Aug 26, 2026, 12:00:00 AM","dateUpdated":"Sep 17, 2026, 5:21:19 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11607-1.json\nhttps://www.suse.com/security/cve/CVE-2026-72815/\n","aliases":"CVE-2026-72815\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"54f2ee84-c6cc-3a91-8c51-4bfaa9d8c464","product":{"name":"cloudflared-0:2026.8.2-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"5661b0fe-ec34-3832-8905-74054bdea020","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"77380f39-e377-33e3-8448-44d43a5cee8a","product":{"name":"cloudflared-0:2026.8.2-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"7be0a1a9-3c3b-3d7b-acf6-c6cdea87dc23","product":{"name":"cloudflared-0:2026.8.2-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a9583913-c05f-3d11-9ea3-f9480b74b3c9","product":{"name":"cloudflared-0:2026.8.2-1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"869fcf9b-c1f8-34ad-ba79-cc79e3f90b92","advisory":{"id":"RHSA-2026:54420","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Aug 12, 2026, 5:43:48 PM","dateUpdated":"Oct 30, 2026, 7:27:00 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:54420\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54420.json\n","aliases":"CVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"097bb5bd-3d69-39b0-9c7c-56cbef58fa53","product":{"name":"cosign-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"4100e192-b2ad-35be-b4f2-7cb7535d6a04","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"77d1bff0-31e7-3f43-a463-fd38fb7e0366","product":{"name":"cosign-0:3.1.3-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c51eedea-c76e-3b87-bc0d-26de1c920bd2","product":{"name":"cosign-0:3.1.3-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"e3e7578d-d5bb-307b-a787-66457d45cbd7","product":{"name":"cosign-main@src","vendor":{"name":"Red Hat"}}},{"id":"f1002646-1a77-3607-af81-1d8eb37dd516","product":{"name":"cosign-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f55be290-0c65-30a1-a59e-06a42faa6e6a","product":{"name":"cosign-0:3.1.3-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"9c8e6634-8e73-3967-a7d7-89dd280d083d","advisory":{"id":"openSUSE-SU-2026:21653-1","description":"Security update for v2ray-core","summary":"Security update for v2ray-core","datePublished":"Aug 25, 2026, 6:20:49 PM","dateUpdated":"Sep 17, 2026, 5:42:34 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21653-1.json\nhttps://bugzilla.suse.com/1258546\nhttps://bugzilla.suse.com/1266787\nhttps://bugzilla.suse.com/1276119\nhttps://www.suse.com/security/cve/CVE-2026-27017/\nhttps://www.suse.com/security/cve/CVE-2026-39821/\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72816/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-27017\nCVE-2026-39821\nCVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"3b437aad-e760-39c6-a559-4808882b1912","product":{"name":"golang-github-v2fly-v2ray-core-0:5.53.0-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"45164c58-03b2-37f5-a150-933e5dc15d3b","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"8de9c0fb-cbcf-3a43-9ecb-37bc2ba96763","product":{"name":"v2ray-core-0:5.53.0-bp160.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d1a4e007-6974-300c-93e5-46b49ae6379b","product":{"name":"v2ray-core-0:5.53.0-bp160.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"d3d2d625-5361-3324-ba26-b07afb834d1b","product":{"name":"v2ray-core-0:5.53.0-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f6c345f9-1eac-3e38-8b88-08823a61f191","product":{"name":"v2ray-core-0:5.53.0-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"9f1dfb08-5b71-3e6e-9638-e620609b9aaa","advisory":{"id":"RHSA-2026:49732","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Aug 3, 2026, 5:08:46 PM","dateUpdated":"Oct 30, 2026, 7:26:54 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:49732\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49732.json\n","aliases":"CVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"628b82d3-5a3b-3fce-bd1a-0a18763dae05","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"663b4d20-77ac-3127-a97f-93dd695803fd","product":{"name":"spire1-15-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6b2dc169-3b41-3f4e-96c7-66277692d802","product":{"name":"spire1.15-server-0:1.15.2-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"73cc2440-e1cc-3798-9aeb-31c05d0bd7bb","product":{"name":"spire1.15-server-0:1.15.2-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"75b9f1f5-3bba-3692-b3d9-9d9c7b945856","product":{"name":"spire1.15-oidc-discovery-provider-0:1.15.2-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"7c9a0701-7453-39bd-aad3-c7d6ef4ba2ba","product":{"name":"spire1-15-main@src","vendor":{"name":"Red Hat"}}},{"id":"b0366bc1-b0f1-38f4-93df-a8915c990324","product":{"name":"spire1.15-0:1.15.2-0.4.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"bb0013e6-f57c-3f2e-84e7-243efd7bbd11","product":{"name":"spire1.15-agent-0:1.15.2-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c04b527a-8997-3aad-a529-a54db46b1066","product":{"name":"spire1.15-0:1.15.2-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"c1c2276e-b921-3d15-9e92-303e013dc55c","product":{"name":"spire1.15-0:1.15.2-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c4ffd3d0-2389-3c14-9ac3-05e2c3030c7a","product":{"name":"spire1.15-agent-0:1.15.2-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"e3eb65e0-d252-363a-99d3-154be73c9dcb","product":{"name":"spire1.15-oidc-discovery-provider-0:1.15.2-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"e66aa92c-f76a-322b-926f-b7b21e1cefe9","product":{"name":"spire1-15-main@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"a782a74b-ca79-3fcc-a537-cc4ba0ecbf80","advisory":{"id":"RHSA-2026:49718","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Aug 3, 2026, 4:54:21 PM","dateUpdated":"Oct 30, 2026, 7:26:53 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:49718\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49718.json\n","aliases":"CVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"41b779ac-b261-3260-af39-495d8df04a33","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"43fcc979-0231-3c60-a9d9-697de3f30bbd","product":{"name":"spire1-14-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"4be89cbc-8375-3075-ad74-aebb0a6f8225","product":{"name":"spire1-14-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"5939cfe7-5180-3f04-b1e4-9670004fedbc","product":{"name":"spire1.14-oidc-discovery-provider-0:1.14.7-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"5963e036-705a-34a3-a063-01411798a810","product":{"name":"spire1.14-0:1.14.7-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"73a041d6-b432-3a43-8d6b-ac3e4ba58470","product":{"name":"spire1.14-server-0:1.14.7-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"78f0b076-0404-381c-95e1-efc5438f1d88","product":{"name":"spire1.14-agent-0:1.14.7-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c91f4a7c-3371-3fa1-aa80-1a523f477232","product":{"name":"spire1-14-main@src","vendor":{"name":"Red Hat"}}},{"id":"ceb7f9b5-c61e-3b2f-b648-0661b94c6992","product":{"name":"spire1.14-agent-0:1.14.7-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"d56f96d9-1f15-36dc-b7b7-e04d4e48a58a","product":{"name":"spire1.14-0:1.14.7-0.4.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"e0cd98fc-88b7-3b5e-9319-c51402f946e8","product":{"name":"spire1.14-0:1.14.7-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"ef489d29-9a92-39e9-b22d-db666dd729b7","product":{"name":"spire1.14-server-0:1.14.7-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f3b1f885-d478-389f-9d92-81f216554203","product":{"name":"spire1.14-oidc-discovery-provider-0:1.14.7-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"db8691c2-7e6d-3098-a59f-f21bceef206a","advisory":{"id":"openSUSE-SU-2026:12297-1","description":"kubectl-retina-1.3.1-1.1 on GA media","summary":"kubectl-retina-1.3.1-1.1 on GA media","datePublished":"Oct 27, 2026, 12:00:00 AM","dateUpdated":"Oct 28, 2026, 11:19:25 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12297-1.json\nhttps://www.suse.com/security/cve/CVE-2024-51744/\nhttps://www.suse.com/security/cve/CVE-2025-22872/\nhttps://www.suse.com/security/cve/CVE-2025-27144/\nhttps://www.suse.com/security/cve/CVE-2025-30204/\nhttps://www.suse.com/security/cve/CVE-2025-54410/\nhttps://www.suse.com/security/cve/CVE-2025-58190/\nhttps://www.suse.com/security/cve/CVE-2026-33186/\nhttps://www.suse.com/security/cve/CVE-2026-34986/\nhttps://www.suse.com/security/cve/CVE-2026-53941/\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-95838/\n","aliases":"CVE-2024-51744\nCVE-2025-22872\nCVE-2025-27144\nCVE-2025-30204\nCVE-2025-54410\nCVE-2025-58190\nCVE-2026-33186\nCVE-2026-34986\nCVE-2026-53941\nCVE-2026-72815\nCVE-2026-95838\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"2812187c-b3d6-3a85-b7a4-92942626088a","product":{"name":"kubectl-retina-0:1.3.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"33ae9e77-e99d-32ff-88f3-c32d782d8951","product":{"name":"kubectl-retina-0:1.3.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"3d153b7b-92ad-3fe2-aa1c-291965ed83a1","product":{"name":"kubectl-retina-0:1.3.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"4e0eb690-758b-3a5b-b36b-51c3df6ca139","product":{"name":"kubectl-retina-zsh-completion-0:1.3.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"505de098-e6ea-3a69-b51c-089b9ba1a343","product":{"name":"kubectl-retina-zsh-completion-0:1.3.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"6ea94811-a109-3e23-8534-b966920f358d","product":{"name":"kubectl-retina-bash-completion-0:1.3.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"75335a29-d28e-34ee-85f0-14ef8eac36bf","product":{"name":"kubectl-retina-0:1.3.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"94b63362-10ea-32a9-ae5f-9a1984e94ffd","product":{"name":"kubectl-retina-fish-completion-0:1.3.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"af35e941-add4-3aa9-9a3b-781d9f2f8e6e","product":{"name":"kubectl-retina-zsh-completion-0:1.3.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"cccc1d61-e2d9-3597-8182-cc402e17ed89","product":{"name":"kubectl-retina-bash-completion-0:1.3.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"da836244-d450-3729-82fd-5e22027a0d7a","product":{"name":"kubectl-retina-bash-completion-0:1.3.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"dc25e57b-47ad-3d3f-b9ea-aa9806c5d798","product":{"name":"kubectl-retina-bash-completion-0:1.3.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"dc474e74-887b-399f-aa95-ab6d12ef3795","product":{"name":"kubectl-retina-zsh-completion-0:1.3.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"ea9bf3c6-1591-3371-93fe-46ee1f7c75f6","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"efad3d16-58f3-3978-830b-6249677e6bd0","product":{"name":"kubectl-retina-fish-completion-0:1.3.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f7844122-04e8-3db6-a841-f17a0e68f177","product":{"name":"kubectl-retina-fish-completion-0:1.3.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"f91c3751-3a87-329e-8a48-ef5f8ca57327","product":{"name":"kubectl-retina-fish-completion-0:1.3.1-1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"e3da8173-4be6-3b7a-90cc-92b06cfc093d","advisory":{"id":"openSUSE-SU-2026:21670-1","description":"Security update for cloudflared","summary":"Security update for cloudflared","datePublished":"Aug 27, 2026, 7:43:09 PM","dateUpdated":"Sep 17, 2026, 5:42:43 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21670-1.json\nhttps://bugzilla.suse.com/1276196\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72816/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"03ed7c04-669d-3910-bed7-99757e89c887","product":{"name":"cloudflared-0:2026.8.2-bp160.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"1c1dcfb9-e496-36ec-aa59-b64d591c6afe","product":{"name":"cloudflared-0:2026.8.2-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"2199f209-58b0-391a-a20b-fa90683bffaa","product":{"name":"cloudflared-0:2026.8.2-bp160.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"23ca1a57-2e22-326e-860d-54251d39c6e0","product":{"name":"cloudflared-0:2026.8.2-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c34b9841-2d66-3ac1-9953-2db2fe6f8685","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}}]}}]}