{"id":"EUVD-2026-58631","enisaUuid":"bebc97e7-bdf5-392d-abb8-dc647c80c018","description":"go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware (middleware/realip.go). The realIP() function reads client-controlled headers (True-Client-IP, X-Real-IP, and X-Forwarded-For) and overwrites r.RemoteAddr without verifying that the request originated from a trusted proxy. Attackers can supply arbitrary IP addresses in these headers to bypass IP-based access controls, evade rate limiting and geo-IP restrictions, and pollute audit logs. Fixed in 5.3.0.","datePublished":"Aug 14, 2026, 11:35:28 AM","dateUpdated":"Oct 8, 2026, 3:24:31 PM","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/go-chi/chi/security/advisories/GHSA-rjr7-jggh-pgcp\nhttps://www.vulncheck.com/advisories/go-chi-chi-before-ip-spoofing-via-realip-middleware\n","aliases":"CVE-2026-72816\nGHSA-xg24-pmhh-m4m9\n","assigner":"VulnCheck","epss":0.3,"enisaIdProduct":[{"id":"27427bf5-6d5c-3291-b60e-3714ce355e5e","product":{"name":"chi","vendor":{"name":"go-chi"}},"product_version":"0 \u003c5.3.0"}],"enisaIdVendor":[{"id":"3686d62a-b067-33d8-bb22-db579202eb62","vendor":{"name":"go-chi"}}],"enisaIdVulnerability":[{"id":"9777ee9a-1db6-3732-9fe2-91b40a46cb1d","vulnerability":{"id":"GHSA-xg24-pmhh-m4m9","description":"go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware (middleware/realip.go). The realIP() function reads client-controlled headers (True-Client-IP, X-Real-IP, and X-Forwarded-For) and overwrites r.RemoteAddr without verifying that the request originated from a trusted proxy. Attackers can supply arbitrary IP addresses in these headers to bypass IP-based access controls, evade rate limiting and geo-IP restrictions, and pollute audit logs. Fixed in 5.3.0.","datePublished":"Aug 14, 2026, 12:31:25 PM","dateUpdated":"Aug 14, 2026, 12:31:25 PM","baseScore":0.0,"references":"https://github.com/go-chi/chi/security/advisories/GHSA-rjr7-jggh-pgcp\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-72816\nhttps://www.vulncheck.com/advisories/go-chi-chi-before-ip-spoofing-via-realip-middleware\n","enisa_id":"EUVD-2026-58631\n","aliases":"GHSA-xg24-pmhh-m4m9\nCVE-2026-72816\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:03:49 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"d9f84e08-afe5-3b62-b9bf-5a24d23c65d2","vulnerability":{"id":"CVE-2026-72816","description":"go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware (middleware/realip.go). The realIP() function reads client-controlled headers (True-Client-IP, X-Real-IP, and X-Forwarded-For) and overwrites r.RemoteAddr without verifying that the request originated from a trusted proxy. Attackers can supply arbitrary IP addresses in these headers to bypass IP-based access controls, evade rate limiting and geo-IP restrictions, and pollute audit logs. Fixed in 5.3.0.","datePublished":"Aug 14, 2026, 11:35:28 AM","dateUpdated":"Oct 8, 2026, 3:24:31 PM","status":"PUBLISHED","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/go-chi/chi/security/advisories/GHSA-rjr7-jggh-pgcp\nhttps://www.vulncheck.com/advisories/go-chi-chi-before-ip-spoofing-via-realip-middleware\n","enisa_id":"EUVD-2026-58631\n","assigner":"VulnCheck","epss":0.3,"dataProcessed":"Nov 5, 2026, 7:13:46 AM","vulnerabilityProduct":[{"id":"1c54dec4-2750-3f4d-803f-d230932ee01a","product":{"name":"chi","vendor":{"name":"go-chi"}},"product_version":"0 \u003c5.3.0"}],"vulnerabilityVendor":[{"id":"26d7d550-9b28-342c-b2d2-76f9a8df3102","vendor":{"name":"go-chi"}}]}}],"enisaIdAdvisory":[{"id":"021b2d71-83c1-3415-8809-6ef6a0c1252d","advisory":{"id":"RHSA-2026:49732","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Aug 3, 2026, 5:08:46 PM","dateUpdated":"Oct 30, 2026, 7:26:54 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:49732\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49732.json\n","aliases":"CVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"628b82d3-5a3b-3fce-bd1a-0a18763dae05","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"663b4d20-77ac-3127-a97f-93dd695803fd","product":{"name":"spire1-15-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6b2dc169-3b41-3f4e-96c7-66277692d802","product":{"name":"spire1.15-server-0:1.15.2-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"73cc2440-e1cc-3798-9aeb-31c05d0bd7bb","product":{"name":"spire1.15-server-0:1.15.2-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"75b9f1f5-3bba-3692-b3d9-9d9c7b945856","product":{"name":"spire1.15-oidc-discovery-provider-0:1.15.2-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"7c9a0701-7453-39bd-aad3-c7d6ef4ba2ba","product":{"name":"spire1-15-main@src","vendor":{"name":"Red Hat"}}},{"id":"b0366bc1-b0f1-38f4-93df-a8915c990324","product":{"name":"spire1.15-0:1.15.2-0.4.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"bb0013e6-f57c-3f2e-84e7-243efd7bbd11","product":{"name":"spire1.15-agent-0:1.15.2-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c04b527a-8997-3aad-a529-a54db46b1066","product":{"name":"spire1.15-0:1.15.2-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"c1c2276e-b921-3d15-9e92-303e013dc55c","product":{"name":"spire1.15-0:1.15.2-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c4ffd3d0-2389-3c14-9ac3-05e2c3030c7a","product":{"name":"spire1.15-agent-0:1.15.2-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"e3eb65e0-d252-363a-99d3-154be73c9dcb","product":{"name":"spire1.15-oidc-discovery-provider-0:1.15.2-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"e66aa92c-f76a-322b-926f-b7b21e1cefe9","product":{"name":"spire1-15-main@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"0bde0586-3dcf-3d28-97d9-d968acfc680f","advisory":{"id":"msrc_CVE-2026-72816","description":"go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware","datePublished":"Aug 20, 2026, 10:02:08 PM","dateUpdated":"Sep 25, 2026, 2:31:38 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-72816.json\n","aliases":"CVE-2026-72816\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"1d41e257-7414-3c76-812a-a3c42add1ce3","product":{"name":"gh","vendor":{"name":"r-lib"}}},{"id":"2f494ece-498b-3509-91b6-7f5d7b8b1b30","product":{"name":"azl3 gh 0:2.62.0-20.azl3","vendor":{"name":"Microsoft"}}},{"id":"4dea3134-a3c5-3299-b06b-fa9c224a5050","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"dcb59fde-dfa0-3c6b-b974-d2ed74e5db95","product":{"name":"influxdb","vendor":{"name":"Microsoft"}}},{"id":"e3cf1371-aa1f-3a95-9530-701fb5a5e777","product":{"name":"3.0","vendor":{"name":"Wind River"}}}]}},{"id":"1af57243-1d6d-3bac-bdab-b71cebca8d32","advisory":{"id":"openSUSE-SU-2026:21670-1","description":"Security update for cloudflared","summary":"Security update for cloudflared","datePublished":"Aug 27, 2026, 7:43:09 PM","dateUpdated":"Sep 17, 2026, 5:42:43 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21670-1.json\nhttps://bugzilla.suse.com/1276196\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72816/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"03ed7c04-669d-3910-bed7-99757e89c887","product":{"name":"cloudflared-0:2026.8.2-bp160.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"1c1dcfb9-e496-36ec-aa59-b64d591c6afe","product":{"name":"cloudflared-0:2026.8.2-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"2199f209-58b0-391a-a20b-fa90683bffaa","product":{"name":"cloudflared-0:2026.8.2-bp160.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"23ca1a57-2e22-326e-860d-54251d39c6e0","product":{"name":"cloudflared-0:2026.8.2-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c34b9841-2d66-3ac1-9953-2db2fe6f8685","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}}]}},{"id":"27c94ba0-e3db-3a97-b679-d653fefacb3f","advisory":{"id":"openSUSE-SU-2026:21918-1","description":"Security update for warewulf4","summary":"Security update for warewulf4","datePublished":"Sep 18, 2026, 10:51:38 AM","dateUpdated":"Sep 24, 2026, 5:48:21 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21918-1.json\nhttps://bugzilla.suse.com/1262805\nhttps://bugzilla.suse.com/1276100\nhttps://www.suse.com/security/cve/CVE-2026-34986/\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72816/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-34986\nCVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0c4f167c-7604-3b6c-8027-40bb59244797","product":{"name":"warewulf4-0:4.7.1-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"13592195-acb2-3f20-918d-df5e0b2c3c74","product":{"name":"warewulf4-overlay-rke2-0:4.7.1-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"19bd16be-f20e-3e43-8599-ba5ae38d0aa3","product":{"name":"warewulf4-man-0:4.7.1-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"6d8216c2-4223-3872-a891-3336c7788255","product":{"name":"warewulf4-reference-doc-0:4.7.1-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"6e5f1f6e-d91c-3bf8-9144-475135abc87a","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"97c32106-2a99-3242-9dad-c688e6e46e81","product":{"name":"warewulf4-overlay-0:4.7.1-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b6887f85-9e63-3767-b7d3-98aa0d3837fd","product":{"name":"warewulf4-0:4.7.1-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"d8790b0d-3b46-3e4e-9982-b394dabb9456","product":{"name":"warewulf4-dracut-0:4.7.1-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"e1e47721-40a4-337f-b5c9-86c517c15d57","product":{"name":"warewulf4-overlay-0:4.7.1-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"7032eef9-7eac-3475-b228-e84d5f3326cc","advisory":{"id":"openSUSE-SU-2026:21645-1","description":"Security update for trivy","summary":"Security update for trivy","datePublished":"Aug 25, 2026, 7:22:37 AM","dateUpdated":"Sep 17, 2026, 5:42:31 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21645-1.json\nhttps://bugzilla.suse.com/1276128\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72816/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0da1372b-ba62-3353-8c2e-0051c3ccdb6b","product":{"name":"trivy-0:0.74.0-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"93b4a60b-b02c-3788-958f-2b558a85e537","product":{"name":"trivy-0:0.74.0-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"9d73d383-09e4-31d9-953a-2f0c40600046","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"acb0a0b4-4f38-350a-bd64-796e77e586bc","product":{"name":"trivy-0:0.74.0-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"d8497427-9c4d-3226-918c-77875e316870","product":{"name":"trivy-0:0.74.0-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"903a5563-7702-3ec0-923a-2a9215e22ae4","advisory":{"id":"RHSA-2026:49718","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Aug 3, 2026, 4:54:21 PM","dateUpdated":"Oct 30, 2026, 7:26:53 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:49718\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49718.json\n","aliases":"CVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"41b779ac-b261-3260-af39-495d8df04a33","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"43fcc979-0231-3c60-a9d9-697de3f30bbd","product":{"name":"spire1-14-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"4be89cbc-8375-3075-ad74-aebb0a6f8225","product":{"name":"spire1-14-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"5939cfe7-5180-3f04-b1e4-9670004fedbc","product":{"name":"spire1.14-oidc-discovery-provider-0:1.14.7-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"5963e036-705a-34a3-a063-01411798a810","product":{"name":"spire1.14-0:1.14.7-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"73a041d6-b432-3a43-8d6b-ac3e4ba58470","product":{"name":"spire1.14-server-0:1.14.7-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"78f0b076-0404-381c-95e1-efc5438f1d88","product":{"name":"spire1.14-agent-0:1.14.7-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c91f4a7c-3371-3fa1-aa80-1a523f477232","product":{"name":"spire1-14-main@src","vendor":{"name":"Red Hat"}}},{"id":"ceb7f9b5-c61e-3b2f-b648-0661b94c6992","product":{"name":"spire1.14-agent-0:1.14.7-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"d56f96d9-1f15-36dc-b7b7-e04d4e48a58a","product":{"name":"spire1.14-0:1.14.7-0.4.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"e0cd98fc-88b7-3b5e-9319-c51402f946e8","product":{"name":"spire1.14-0:1.14.7-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"ef489d29-9a92-39e9-b22d-db666dd729b7","product":{"name":"spire1.14-server-0:1.14.7-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f3b1f885-d478-389f-9d92-81f216554203","product":{"name":"spire1.14-oidc-discovery-provider-0:1.14.7-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"9c57912b-149f-356e-8777-e317dcce6795","advisory":{"id":"RHSA-2026:54420","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Aug 12, 2026, 5:43:48 PM","dateUpdated":"Oct 30, 2026, 7:27:00 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:54420\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54420.json\n","aliases":"CVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"097bb5bd-3d69-39b0-9c7c-56cbef58fa53","product":{"name":"cosign-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"4100e192-b2ad-35be-b4f2-7cb7535d6a04","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"77d1bff0-31e7-3f43-a463-fd38fb7e0366","product":{"name":"cosign-0:3.1.3-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c51eedea-c76e-3b87-bc0d-26de1c920bd2","product":{"name":"cosign-0:3.1.3-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"e3e7578d-d5bb-307b-a787-66457d45cbd7","product":{"name":"cosign-main@src","vendor":{"name":"Red Hat"}}},{"id":"f1002646-1a77-3607-af81-1d8eb37dd516","product":{"name":"cosign-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f55be290-0c65-30a1-a59e-06a42faa6e6a","product":{"name":"cosign-0:3.1.3-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"ccf8130c-d0ff-3b3a-9155-e429f5a248bb","advisory":{"id":"openSUSE-SU-2026:21653-1","description":"Security update for v2ray-core","summary":"Security update for v2ray-core","datePublished":"Aug 25, 2026, 6:20:49 PM","dateUpdated":"Sep 17, 2026, 5:42:34 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21653-1.json\nhttps://bugzilla.suse.com/1258546\nhttps://bugzilla.suse.com/1266787\nhttps://bugzilla.suse.com/1276119\nhttps://www.suse.com/security/cve/CVE-2026-27017/\nhttps://www.suse.com/security/cve/CVE-2026-39821/\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72816/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-27017\nCVE-2026-39821\nCVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"3b437aad-e760-39c6-a559-4808882b1912","product":{"name":"golang-github-v2fly-v2ray-core-0:5.53.0-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"45164c58-03b2-37f5-a150-933e5dc15d3b","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"8de9c0fb-cbcf-3a43-9ecb-37bc2ba96763","product":{"name":"v2ray-core-0:5.53.0-bp160.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d1a4e007-6974-300c-93e5-46b49ae6379b","product":{"name":"v2ray-core-0:5.53.0-bp160.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"d3d2d625-5361-3324-ba26-b07afb834d1b","product":{"name":"v2ray-core-0:5.53.0-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f6c345f9-1eac-3e38-8b88-08823a61f191","product":{"name":"v2ray-core-0:5.53.0-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"d2852319-99ea-36f9-931d-7e16de61c885","advisory":{"id":"openSUSE-SU-2026:21793-1","description":"Security update for hauler","summary":"Security update for hauler","datePublished":"Sep 3, 2026, 12:32:31 PM","dateUpdated":"Sep 17, 2026, 5:43:58 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21793-1.json\nhttps://bugzilla.suse.com/1265425\nhttps://bugzilla.suse.com/1276124\nhttps://bugzilla.suse.com/1276651\nhttps://bugzilla.suse.com/1277965\nhttps://www.suse.com/security/cve/CVE-2026-37236/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-41888/\nhttps://www.suse.com/security/cve/CVE-2026-72815/\nhttps://www.suse.com/security/cve/CVE-2026-72816/\nhttps://www.suse.com/security/cve/CVE-2026-72817/\n","aliases":"CVE-2026-37236\nCVE-2026-41178\nCVE-2026-41888\nCVE-2026-72815\nCVE-2026-72816\nCVE-2026-72817\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"49894494-6840-373a-b223-74071c7f039a","product":{"name":"hauler-0:2.1.0-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"5bec76f5-9dcf-3bfa-bae7-b066fe8ce53b","product":{"name":"hauler-0:2.1.0-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"d9ee0cc9-0cd0-3cee-8163-8584803916d5","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}}]}}]}