{"id":"EUVD-2026-71518","enisaUuid":"6ea41de7-03fa-3f38-b723-07061bbb0c74","description":"undici\u0027s cache interceptor does not handle the Set-Cookie response header anywhere in its cache path, so it neither refuses to store nor strips that header. In shared cache mode, which is the default, an otherwise cacheable response that carries a Set-Cookie header, for example one marked with a public and max-age directive, is stored and then re-served to a later caller that matches the same cache key. As a result one caller\u0027s cookie is disclosed to a different caller, and an untrusted server can inject cookies into cached responses served to all subsequent callers. This violates the requirement that a shared cache must not store cookies. This affects undici versions from 7.0.0 up to 7.29.1 and from 8.0.0 up to 8.10.2. Users should upgrade to undici 7.29.1 or 8.10.2.","datePublished":"Sep 4, 2026, 4:59:08 PM","dateUpdated":"Sep 4, 2026, 6:34:14 PM","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","references":"https://github.com/nodejs/undici/security/advisories/GHSA-2jfj-6hjv-fm6j\nhttps://cna.openjsf.org/security-advisories.html\n","aliases":"CVE-2026-84933\nGHSA-2jfj-6hjv-fm6j\n","assigner":"openjs","epss":0.3,"enisaIdProduct":[{"id":"600dc34e-d817-38f0-82a3-e21a92667e76","product":{"name":"undici","vendor":{"name":"undici"}},"product_version":"7.0.0 \u003c7.29.1"},{"id":"d3aea5fb-cb3f-3484-9b84-9ca968f7095e","product":{"name":"undici","vendor":{"name":"undici"}},"product_version":"8.0.0 \u003c8.10.2"}],"enisaIdVendor":[{"id":"85a2edae-f638-3420-8766-d7316f5a08c8","vendor":{"name":"undici"}}],"enisaIdVulnerability":[{"id":"5b2942cd-629e-39ae-91e8-b1be47e353de","vulnerability":{"id":"GHSA-2jfj-6hjv-fm6j","description":"undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches","datePublished":"Sep 29, 2026, 6:19:58 PM","dateUpdated":"Sep 29, 2026, 6:19:58 PM","baseScore":0.0,"references":"https://github.com/nodejs/undici/security/advisories/GHSA-2jfj-6hjv-fm6j\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-84933\nhttps://github.com/nodejs/undici/commit/b6c5a00252c37da9dd2db9bead053bb843e1f988\nhttps://github.com/nodejs/undici/commit/cb75bbb34224a968b4ad80cab8b7aba5e0b3b28a\nhttps://cna.openjsf.org/security-advisories.html\nhttps://github.com/nodejs/undici\nhttps://github.com/nodejs/undici/releases/tag/v7.29.1\nhttps://github.com/nodejs/undici/releases/tag/v8.10.2\n","enisa_id":"EUVD-2026-71518\n","aliases":"GHSA-2jfj-6hjv-fm6j\nCVE-2026-84933\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:06:27 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"c156396a-8f61-311a-8a19-c68710deab2e","vulnerability":{"id":"CVE-2026-84933","description":"undici\u0027s cache interceptor does not handle the Set-Cookie response header anywhere in its cache path, so it neither refuses to store nor strips that header. In shared cache mode, which is the default, an otherwise cacheable response that carries a Set-Cookie header, for example one marked with a public and max-age directive, is stored and then re-served to a later caller that matches the same cache key. As a result one caller\u0027s cookie is disclosed to a different caller, and an untrusted server can inject cookies into cached responses served to all subsequent callers. This violates the requirement that a shared cache must not store cookies. This affects undici versions from 7.0.0 up to 7.29.1 and from 8.0.0 up to 8.10.2. Users should upgrade to undici 7.29.1 or 8.10.2.","datePublished":"Sep 4, 2026, 4:59:08 PM","dateUpdated":"Sep 4, 2026, 6:34:14 PM","status":"PUBLISHED","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","references":"https://github.com/nodejs/undici/security/advisories/GHSA-2jfj-6hjv-fm6j\nhttps://cna.openjsf.org/security-advisories.html\n","enisa_id":"EUVD-2026-71518\n","assigner":"openjs","epss":0.3,"dataProcessed":"Nov 5, 2026, 7:13:15 AM","vulnerabilityProduct":[{"id":"bd465240-b9b8-3c30-8537-a0be70843c65","product":{"name":"undici","vendor":{"name":"undici"}},"product_version":"8.0.0 \u003c8.10.2"},{"id":"d03708a4-ab49-3e34-9fa3-91cba9fea418","product":{"name":"undici","vendor":{"name":"undici"}},"product_version":"7.0.0 \u003c7.29.1"}],"vulnerabilityVendor":[{"id":"851b5838-c809-3212-bcfd-70632520db22","vendor":{"name":"undici"}}]}}],"enisaIdAdvisory":[{"id":"530a99e1-1314-3878-99af-11f4ebbcfe50","advisory":{"id":"RHSA-2026:54389","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Aug 12, 2026, 2:18:37 PM","dateUpdated":"Oct 31, 2026, 5:43:14 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:54389\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54389.json\n","aliases":"CVE-2026-14257\nCVE-2026-18149\nCVE-2026-48932\nCVE-2026-69152\nCVE-2026-84890\nCVE-2026-84933\nCVE-2026-84947\nCVE-2026-85008\nCVE-2026-85014\nCVE-2026-85152\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0291a143-bb7d-3c94-8f0b-45d8cb73b740","product":{"name":"nodejs26-libs-0:26.7.0-1.5.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"0539d68d-b070-39b2-8980-422f6f339419","product":{"name":"nodejs26-npm-0:11.19.0-1.26.7.0.1.5.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"0b583bc8-5f1e-3953-97f8-606380706279","product":{"name":"nodejs26-bin-0:26.7.0-1.5.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"0eb8f92a-ca1d-34ae-8882-65795ab9e810","product":{"name":"nodejs26-full-i18n-0:26.7.0-1.5.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"10ad6e12-cd62-38c2-b8b0-035272a1fde7","product":{"name":"nodejs26-libs-0:26.7.0-1.5.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"119b4f0a-8635-3001-8490-decddc6eaa69","product":{"name":"nodejs26-docs-0:26.7.0-1.5.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"133b1507-6785-3241-ba20-3712b62af8d9","product":{"name":"nodejs26-npm-bin-1:26.7.0-1.5.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"151c54a4-2bfb-311e-aba1-0f20cd22350b","product":{"name":"nodejs26-libs-1:26.7.0-1.5.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"1b6fcc04-0c06-3310-b556-e53ee0550391","product":{"name":"nodejs26-full-i18n-0:26.7.0-1.5.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"1cd26b46-0dfc-3a27-9dd4-0dbc064f604a","product":{"name":"nodejs26-0:26.7.0-1.5.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"212231db-bc1e-3802-afd3-73222228e8cf","product":{"name":"v8-14.6-devel-3:14.6.202.34-1.26.7.0.1.5.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"22ced6bd-b2a3-37f3-a718-b0a5eb18c2fa","product":{"name":"nodejs26-devel-1:26.7.0-1.5.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"25511970-c9a7-34f6-8db1-782ff7cead44","product":{"name":"nodejs26-npm-bin-0:26.7.0-1.5.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"30838493-1429-3ddc-98b6-3eca7dddf431","product":{"name":"nodejs26-1:26.7.0-1.5.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"35be3344-c9ab-34e0-935c-bb22e1672fd1","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"37a93ec9-f9e8-3672-8022-54fe497021ad","product":{"name":"nodejs26-npm-bin-0:26.7.0-1.5.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"444e6018-939c-3260-8ee0-3fa788de4882","product":{"name":"nodejs26-docs-0:26.7.0-1.5.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"4ee2430d-b3c9-3533-8d10-bb4195af5bfa","product":{"name":"nodejs26-full-i18n-1:26.7.0-1.5.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"52bd708c-d9a5-391c-ae4a-c6d6abb46927","product":{"name":"nodejs26-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6146f594-4f8f-3e91-85b8-e7d25a59de88","product":{"name":"v8-14.6-devel-3:14.6.202.34-1.26.7.0.1.5.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"644fd3f9-eaa0-35d7-ba60-7a439e062907","product":{"name":"nodejs26-bin-0:26.7.0-1.5.2.hum1@noarch","vendor":{"name":"Red Hat"}}},{"id":"71e3f6f8-a1c5-3225-a511-0daecbb251e7","product":{"name":"nodejs26-npm-1:11.19.0-1.26.7.0.1.5.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"78be92c6-8b2f-339b-b6b5-4fac75054341","product":{"name":"nodejs26-npm-bin-1:26.7.0-1.5.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"7b8d9b4c-ddee-30b3-abec-94f6874005a1","product":{"name":"nodejs26-bin-1:26.7.0-1.5.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"7f55ac74-8ad9-39d2-98db-1da1ae4d4f39","product":{"name":"nodejs26-1:26.7.0-1.5.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"8a6f8758-f40f-3f92-b0ae-e70f0024c03f","product":{"name":"nodejs26-docs-1:26.7.0-1.5.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"8d09fae7-2d87-3f5e-afcb-899397cef3b7","product":{"name":"nodejs26-docs-1:26.7.0-1.5.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"91811d54-c16a-384d-8da0-63820e470d16","product":{"name":"nodejs26-bin-0:26.7.0-1.5.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"9868df52-c742-3661-94ca-37177ed95056","product":{"name":"nodejs26-devel-0:26.7.0-1.5.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"a335a6ad-6e6b-3382-bee0-0147f5a5b962","product":{"name":"nodejs26-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"a54ec95d-6b4a-3012-93af-bf8bad4e4c2d","product":{"name":"nodejs26-1:26.7.0-1.5.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"a7fc9d99-b8c8-3153-9cde-7c6685adc5e3","product":{"name":"nodejs26-main@noarch","vendor":{"name":"Red Hat"}}},{"id":"bcfbb9ea-0746-3132-886a-42faba997b7a","product":{"name":"nodejs26-libs-1:26.7.0-1.5.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c1d6f055-e5de-3cb8-8645-6cef69c2b0ce","product":{"name":"v8-14.6-devel-0:14.6.202.34-1.26.7.0.1.5.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"ce2316a0-63e4-362a-bb07-20ef25fee4b4","product":{"name":"nodejs26-main@src","vendor":{"name":"Red Hat"}}},{"id":"d8f83fe2-6eef-38c8-a200-d1585f62fbe2","product":{"name":"nodejs26-devel-0:26.7.0-1.5.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"dac89680-334d-372e-840c-6f796cfd0b17","product":{"name":"nodejs26-0:26.7.0-1.5.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"df7a081b-0ca9-3c23-8934-442578762461","product":{"name":"nodejs26-npm-1:11.19.0-1.26.7.0.1.5.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"e471d051-91e5-3254-bf91-e8c681690c9b","product":{"name":"nodejs26-0:26.7.0-1.5.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"eba816b1-7aa2-38e4-8ea3-025556aa87d5","product":{"name":"v8-14.6-devel-0:14.6.202.34-1.26.7.0.1.5.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"fa162679-f1f5-3c6f-8a74-b372c0bfd39f","product":{"name":"nodejs26-bin-1:26.7.0-1.5.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"fcaa26b0-fe70-3f5e-b30a-1e4e0b019e6b","product":{"name":"nodejs26-devel-1:26.7.0-1.5.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"fd6aff36-c669-3853-9672-041effc73538","product":{"name":"nodejs26-npm-0:11.19.0-1.26.7.0.1.5.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"ffae85fb-f66b-39a8-859a-48ea2ed0d66c","product":{"name":"nodejs26-full-i18n-1:26.7.0-1.5.2.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"67f159cf-3aad-3fb1-8015-7937185680b2","advisory":{"id":"WID-SEC-W-2026-3596","description":"IBM App Connect Enterprise: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um einen Cross-Site Scripting Angriff durchzuführen.","datePublished":"Sep 27, 2026, 10:00:00 PM","dateUpdated":"Nov 1, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3596.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-3596\n","aliases":"CVE-2022-35948\nCVE-2026-13149\nCVE-2026-14257\nCVE-2026-15157\nCVE-2026-1527\nCVE-2026-16728\nCVE-2026-16729\nCVE-2026-18149\nCVE-2026-18540\nCVE-2026-19534\nCVE-2026-2391\nCVE-2026-45820\nCVE-2026-54272\nCVE-2026-63670\nCVE-2026-67213\nCVE-2026-67214\nCVE-2026-69152\nCVE-2026-69192\nCVE-2026-69198\nCVE-2026-73566\nCVE-2026-73646\nCVE-2026-77037\nCVE-2026-77063\nCVE-2026-77078\nCVE-2026-82333\nCVE-2026-82417\nCVE-2026-82562\nCVE-2026-83605\nCVE-2026-83606\nCVE-2026-83607\nCVE-2026-83608\nCVE-2026-83609\nCVE-2026-83610\nCVE-2026-83611\nCVE-2026-83612\nCVE-2026-83613\nCVE-2026-83614\nCVE-2026-83615\nCVE-2026-83616\nCVE-2026-83618\nCVE-2026-83619\nCVE-2026-84292\nCVE-2026-84371\nCVE-2026-84375\nCVE-2026-84890\nCVE-2026-84933\nCVE-2026-84947\nCVE-2026-84961\nCVE-2026-85008\nCVE-2026-85014\nCVE-2026-85024\nCVE-2026-85152\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"07b7ce8b-bbd8-3c1d-90ff-e766961cf95b","product":{"name":"IBM Business Automation Workflow","vendor":{"name":"IBM"}}},{"id":"126a9442-eb03-322f-967d-d4b24b4679fa","product":{"name":"App Connect Enterprise","vendor":{"name":"IBM"}}},{"id":"4f251418-833c-3fbe-a850-6f2f852b6cf4","product":{"name":"Oracle Linux","vendor":{"name":"Oracle Corporation"}}},{"id":"59e49cee-20d8-32d8-a9a5-ada15dab1413","product":{"name":"13.0.9.0","vendor":{"name":"IBM"}}},{"id":"5fc9732f-beac-33ec-bcf5-eaad4b8af406","product":{"name":"for multiplatforms","vendor":{"name":"IBM"}}},{"id":"6149fcf6-f409-3550-8715-408fbcfd0b7d","product":{"name":"TXSeries","vendor":{"name":"IBM"}}},{"id":"bdee46b9-a477-3528-9be8-952bf9fcd6a4","product":{"name":"12.0.12.30","vendor":{"name":"IBM"}}},{"id":"cc0e223e-7625-359d-8296-dd00c8d08686","product":{"name":"IBM WebSphere Service Registry and Repository","vendor":{"name":"IBM"}}}]}},{"id":"a975507a-4fbf-3653-97d9-6b7993f57c9e","advisory":{"id":"openSUSE-SU-2026:22111-1","description":"Security update for pi-coding-agent","summary":"Security update for pi-coding-agent","datePublished":"Oct 9, 2026, 3:27:19 PM","dateUpdated":"Oct 19, 2026, 5:25:33 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_22111-1.json\nhttps://bugzilla.suse.com/1279832\nhttps://bugzilla.suse.com/1283188\nhttps://bugzilla.suse.com/1283392\nhttps://bugzilla.suse.com/1283412\nhttps://www.suse.com/security/cve/CVE-2026-102276/\nhttps://www.suse.com/security/cve/CVE-2026-102277/\nhttps://www.suse.com/security/cve/CVE-2026-102278/\nhttps://www.suse.com/security/cve/CVE-2026-84890/\nhttps://www.suse.com/security/cve/CVE-2026-84933/\nhttps://www.suse.com/security/cve/CVE-2026-84947/\nhttps://www.suse.com/security/cve/CVE-2026-84961/\nhttps://www.suse.com/security/cve/CVE-2026-85008/\nhttps://www.suse.com/security/cve/CVE-2026-85014/\nhttps://www.suse.com/security/cve/CVE-2026-85024/\nhttps://www.suse.com/security/cve/CVE-2026-85152/\n","aliases":"CVE-2026-102276\nCVE-2026-102277\nCVE-2026-102278\nCVE-2026-84890\nCVE-2026-84933\nCVE-2026-84947\nCVE-2026-84961\nCVE-2026-85008\nCVE-2026-85014\nCVE-2026-85024\nCVE-2026-85152\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"279675b6-5e65-35fb-b2d7-575ee3f5c758","product":{"name":"pi-coding-agent-examples-0:1.0.4-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"287cef6e-0138-3a28-bc1e-242170b36a15","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"343c90fe-8485-3ece-ac6a-94079be0e57e","product":{"name":"pi-coding-agent-0:1.0.4-bp160.1.1.noarch","vendor":{"name":"SUSE"}}}]}},{"id":"b83dabb5-ee86-3efe-8a7c-be986dea1e1d","advisory":{"id":"openSUSE-SU-2026:11884-1","description":"pi-coding-agent-0.87.1-1.1 on GA media","summary":"pi-coding-agent-0.87.1-1.1 on GA media","datePublished":"Sep 24, 2026, 12:00:00 AM","dateUpdated":"Sep 25, 2026, 8:57:27 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11884-1.json\nhttps://www.suse.com/security/cve/CVE-2026-84933/\nhttps://www.suse.com/security/cve/CVE-2026-84947/\nhttps://www.suse.com/security/cve/CVE-2026-84961/\n","aliases":"CVE-2026-84933\nCVE-2026-84947\nCVE-2026-84961\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"32719ea3-9ea0-3b7e-b75a-e0d0568300de","product":{"name":"pi-coding-agent-0:0.87.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4524ec5c-cd46-3473-a1ab-dfcc27597d85","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"8c6e5643-b1fd-372e-bd07-9b5c47db5873","product":{"name":"pi-coding-agent-0:0.87.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"9a014ef2-4bb0-3e5b-b8c2-ae45ee490f44","product":{"name":"pi-coding-agent-examples-0:0.87.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"9bdbc8dc-edd3-389d-8e24-5bb47658a328","product":{"name":"pi-coding-agent-examples-0:0.87.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"ad4e2156-b200-30b7-a7f4-84d3b569ee1b","product":{"name":"pi-coding-agent-0:0.87.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"dac63ba8-0979-333d-bc34-a3735ea316a0","product":{"name":"pi-coding-agent-0:0.87.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e86f1353-1089-3d31-bb5a-9499ead8fd8a","product":{"name":"pi-coding-agent-examples-0:0.87.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"e97c920e-baf9-3465-9a26-ec86cde7bf56","product":{"name":"pi-coding-agent-examples-0:0.87.1-1.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"cc4ca842-f979-3577-879f-80baf936302f","advisory":{"id":"RHSA-2026:66008","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 9, 2026, 1:42:29 PM","dateUpdated":"Oct 30, 2026, 6:48:02 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:66008\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_66008.json\n","aliases":"CVE-2026-14199\nCVE-2026-18149\nCVE-2026-18540\nCVE-2026-19197\nCVE-2026-19534\nCVE-2026-28378\nCVE-2026-84890\nCVE-2026-84933\nCVE-2026-84947\nCVE-2026-84961\nCVE-2026-85008\nCVE-2026-85014\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"1683c2ed-1a68-3857-b9cd-76104992d405","product":{"name":"grafana12-4-main@src","vendor":{"name":"Red Hat"}}},{"id":"4ebca8ee-bb1d-3239-ad09-61176f414393","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"c88f4091-13aa-3545-ad65-20a7e97a3cf6","product":{"name":"grafana12-4-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"ce5cc861-671e-3564-b349-510eef311527","product":{"name":"grafana12.4-0:12.4.10-0.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"cf183289-bdfb-3d06-8e60-7193232774c6","product":{"name":"grafana12-4-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"ebc858ef-72b3-34c8-86c3-24dfccceab06","product":{"name":"grafana12.4-0:12.4.10-0.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"f8e59a1f-f0e0-3055-9f7e-e4f4a1d6bae3","product":{"name":"grafana12.4-0:12.4.10-0.2.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"f11acf7a-de26-3a0b-b5eb-8e7220ff350c","advisory":{"id":"RHSA-2026:54438","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Aug 12, 2026, 9:03:47 PM","dateUpdated":"Oct 30, 2026, 6:47:34 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:54438\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54438.json\n","aliases":"CVE-2026-18149\nCVE-2026-48932\nCVE-2026-84890\nCVE-2026-84933\nCVE-2026-84947\nCVE-2026-84961\nCVE-2026-85008\nCVE-2026-85014\nCVE-2026-85152\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0e11ee90-4e94-3c1e-b775-63707f071121","product":{"name":"nodejs24-main@src","vendor":{"name":"Red Hat"}}},{"id":"11529a4f-cfdb-3d8e-b857-28090eef57fa","product":{"name":"nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"1c99b2cd-c22d-36c4-84a1-536b7b3c212d","product":{"name":"nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"2259d586-e13d-3c33-8bfc-9e409745dcbc","product":{"name":"nodejs24-devel-1:24.18.1-0.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"35054b67-cae9-3a26-8dc3-29e73fe2e902","product":{"name":"nodejs24-main@noarch","vendor":{"name":"Red Hat"}}},{"id":"37f1cb8e-c696-3acb-9b4d-5b3622015b8b","product":{"name":"nodejs24-0:24.18.1-0.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"3a4dabb3-3e21-395d-9065-adc75a4c011d","product":{"name":"nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"41fd94b2-5905-3a36-abdc-8f9996447a89","product":{"name":"nodejs24-full-i18n-1:24.18.1-0.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"42852860-fb30-3c95-b0b3-59a3721693af","product":{"name":"nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"4a4a3e5b-ecd0-38a2-9297-c68844e3e4ac","product":{"name":"v8-13.6-devel-3:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"517e5335-4e0d-362f-9b76-640f411b9d97","product":{"name":"nodejs24-libs-1:24.18.1-0.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"55f726fb-5129-364b-a2de-4e3017a76346","product":{"name":"nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"56d155dd-92dc-3799-ade5-9ec8909fadde","product":{"name":"nodejs24-npm-1:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"573d83be-3124-3560-9452-000add642716","product":{"name":"nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"62a0cf5c-70a0-3001-b83c-fa4200f33261","product":{"name":"nodejs24-1:24.18.1-0.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"67472cee-cb21-3b3c-b2d5-cfe03304f77c","product":{"name":"v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6d757a9b-bb2c-3330-a29d-74bb6c292a83","product":{"name":"nodejs24-libs-1:24.18.1-0.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6e6599cf-315f-3bba-a483-f09459a225fb","product":{"name":"nodejs24-npm-bin-1:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"71b29e7c-3ce4-3997-ab8d-3fb28a0904de","product":{"name":"nodejs24-1:24.18.1-0.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"7689a8f4-f789-35e0-a65b-64fdb0694634","product":{"name":"nodejs24-bin-1:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"803f15c5-1a42-3e4e-8bc0-6268c5046563","product":{"name":"nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"84ede53a-4731-3934-86a7-aebed6b9271b","product":{"name":"nodejs24-npm-1:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"869f79dd-b818-3db1-aac4-54cc2e719ecb","product":{"name":"nodejs24-0:24.18.1-0.2.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"8e233c4b-eb3a-3449-b809-cd2815c8b1b6","product":{"name":"nodejs24-docs-1:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"a3bf476d-aa5d-3f62-976f-e700d5013e15","product":{"name":"v8-13.6-devel-3:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"a4e75064-d6f0-3777-aa67-c034143cb731","product":{"name":"nodejs24-docs-1:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"aaa690ab-696d-37bc-8f5d-9d528cc51e77","product":{"name":"nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"b1cfae47-8284-3b26-b878-d87ca14669c8","product":{"name":"nodejs24-1:24.18.1-0.2.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"b43dfbd0-84c3-328e-99de-22c5ac0799a8","product":{"name":"nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"b82dbfd5-0276-30d0-b0fc-d850dd799b96","product":{"name":"nodejs24-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"b9db5853-0d0b-3ebe-a0ab-b1129eec2dc2","product":{"name":"nodejs24-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"bc365b3b-e8f9-3959-a317-18ecad7877e9","product":{"name":"nodejs24-npm-bin-1:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"c2c3c8fc-f14d-38fa-820a-608070d77f5b","product":{"name":"nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"c6c9bc4b-d448-341d-b010-4cc726a78a1e","product":{"name":"nodejs24-bin-1:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"c718087c-a6f5-33e1-9a05-8a18f10b2035","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"c95fa250-05df-3fc3-9e5c-27075a501160","product":{"name":"v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"ca120d32-1beb-3242-967c-5a72d0f5151d","product":{"name":"nodejs24-0:24.18.1-0.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"ce5b1e23-d182-3da4-bdbd-94841a5fff58","product":{"name":"nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"d98634a0-2960-33a7-9f93-261327872502","product":{"name":"nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"dbd41402-5a53-3ae1-9e61-16584d011da2","product":{"name":"nodejs24-full-i18n-1:24.18.1-0.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"e53e7b83-9499-3d99-868a-9a8ca6309062","product":{"name":"nodejs24-devel-1:24.18.1-0.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"f0b860fd-d253-39bf-a653-0519788f7c3c","product":{"name":"nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"fb128204-1422-3352-9d2c-ebbbae9634e1","product":{"name":"nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}}]}}]}