{"id":"GHSA-8r3f-844c-mc37","revision":null,"records":[{"revision":"20aa69f2a2e34be191d7aa936b1f9b65","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-24786","aliases":[],"title":"Infinite loop in JSON unmarshaling in google.golang.org/protobuf","description":"The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.","state":0,"publishedAt":"2024-03-05T22:22:35.299+00:00","modifiedAt":"2026-09-23T13:51:15.891+00:00","affected":[{"ecosystem":"https://pkg.go.dev","name":"google.golang.org/protobuf/encoding/protojson","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"google.golang.org/protobuf\",\n                    \"product\": \"google.golang.org/protobuf/encoding/protojson\",\n                    \"collectionURL\": \"https://pkg.go.dev\",\n                    \"packageName\": \"google.golang.org/protobuf/encoding/protojson\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"1.33.0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"programRoutines\": [\n                        {\n                            \"name\": \"UnmarshalOptions.unmarshal\"\n                        },\n                        {\n                            \"name\": \"Unmarshal\"\n                        },\n                        {\n                            \"name\": \"UnmarshalOptions.Unmarshal\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"https://pkg.go.dev","name":"google.golang.org/protobuf/internal/encoding/json","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"google.golang.org/protobuf\",\n                    \"product\": \"google.golang.org/protobuf/internal/encoding/json\",\n                    \"collectionURL\": \"https://pkg.go.dev\",\n                    \"packageName\": \"google.golang.org/protobuf/internal/encoding/json\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"1.33.0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"programRoutines\": [\n                        {\n                            \"name\": \"Decoder.Read\"\n                        },\n                        {\n                            \"name\": \"Decoder.Peek\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[],"references":["https://go.dev/cl/569356","https://pkg.go.dev/vuln/GO-2024-2611","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDMBHAVSDU2FBDZ45U3A2VLSM35OJ2HU/","http://www.openwall.com/lists/oss-security/2024/03/08/4","https://security.netapp.com/advisory/ntap-20240517-0002/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-24786","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-24786","identifiers":["CVE-2024-24786"]},"retained":false,"historicalAffected":[]},{"revision":"3a66e022de984597b38c1afc80546ec0","observedAt":"2026-11-09T00:05:16.191+00:00","statement":{"source":"euvd","id":"EUVD-2024-0879","aliases":["CVE-2024-24786","GHSA-8r3f-844c-mc37"],"title":"The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.…","description":"The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":null}],"references":["https://go.dev/cl/569356","https://pkg.go.dev/vuln/GO-2024-2611","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDMBHAVSDU2FBDZ45U3A2VLSM35OJ2HU/","http://www.openwall.com/lists/oss-security/2024/03/08/4","https://security.netapp.com/advisory/ntap-20240517-0002/"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-0879","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Mar 5, 2024, 10:22:35 PM","dateUpdated":"Sep 23, 2026, 1:51:15 PM"},"relatedAdvisories":[{"id":"RHSA-2026:80634","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:5054","title":"Red Hat Security Advisory: OpenShift Virtualization 4.16.1 Images security update","vulnerabilityIds":["CVE-2024-24786","CVE-2024-41818"]},{"id":"RHSA-2026:80671","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"SUSE-SU-2024:3151-1","title":"Security update for buildah","vulnerabilityIds":["CVE-2024-1753","CVE-2024-24786","CVE-2024-28180","CVE-2024-3727"]},{"id":"RHSA-2026:80673","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"openSUSE-SU-2024:13840-1","title":"kubernetes1.28-apiserver-1.28.8-1.1 on GA media","vulnerabilityIds":["CVE-2024-24786"]},{"id":"WID-SEC-W-2024-1226","title":"Red Hat OpenShift: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2020-26555","CVE-2021-25220","CVE-2021-29390","CVE-2021-43618","CVE-2022-0480","CVE-2022-2795","CVE-2022-3094","CVE-2022-38096","CVE-2022-40090","CVE-2022-45934","CVE-2022-48554","CVE-2022-48624","CVE-2023-24023","CVE-2023-25193","CVE-2023-25775","CVE-2023-26159","CVE-2023-26364","CVE-2023-28322","CVE-2023-28464","CVE-2023-28866","CVE-2023-2975","CVE-2023-31083","CVE-2023-31122","CVE-2023-3446","CVE-2023-3567","CVE-2023-3618","CVE-2023-37453","CVE-2023-3817","CVE-2023-38469","CVE-2023-38470","CVE-2023-38471","CVE-2023-38472","CVE-2023-38473","CVE-2023-38546","CVE-2023-39189","CVE-2023-39193","CVE-2023-39194","CVE-2023-39198","CVE-2023-39326","CVE-2023-40745","CVE-2023-41175","CVE-2023-4133","CVE-2023-42754","CVE-2023-42756","CVE-2023-43785","CVE-2023-43786","CVE-2023-43787","CVE-2023-43788","CVE-2023-43789","CVE-2023-4408","CVE-2023-45286","CVE-2023-45287","CVE-2023-45288","CVE-2023-45289","CVE-2023-45290","CVE-2023-45857","CVE-2023-45863","CVE-2023-46218","CVE-2023-46862","CVE-2023-47038","CVE-2023-48631","CVE-2023-50387","CVE-2023-50868","CVE-2023-51043","CVE-2023-51779","CVE-2023-51780","CVE-2023-52425","CVE-2023-52434","CVE-2023-52448","CVE-2023-52476","CVE-2023-52489","CVE-2023-52522","CVE-2023-52529","CVE-2023-52574","CVE-2023-52578","CVE-2023-52580","CVE-2023-52581","CVE-2023-52597","CVE-2023-52610","CVE-2023-52620","CVE-2023-5678","CVE-2023-6040","CVE-2023-6121","CVE-2023-6129","CVE-2023-6176","CVE-2023-6228","CVE-2023-6237","CVE-2023-6240","CVE-2023-6531","CVE-2023-6546","CVE-2023-6622","CVE-2023-6915","CVE-2023-6931","CVE-2023-6932","CVE-2023-7008","CVE-2024-0565","CVE-2024-0727","CVE-2024-0841","CVE-2024-1085","CVE-2024-1086","CVE-2024-1394","CVE-2024-1488","CVE-2024-21011","CVE-2024-21012","CVE-2024-21068","CVE-2024-21085","CVE-2024-21094","CVE-2024-22365","CVE-2024-24783","CVE-2024-24784","CVE-2024-24785","CVE-2024-24786","CVE-2024-25062","CVE-2024-25742","CVE-2024-25743","CVE-2024-26582","CVE-2024-26583","CVE-2024-26584","CVE-2024-26585","CVE-2024-26586","CVE-2024-26593","CVE-2024-26602","CVE-2024-26609","CVE-2024-26633","CVE-2024-27316","CVE-2024-28834","CVE-2024-28835","CVE-2024-28849","CVE-2024-29180","CVE-2024-2961","CVE-2024-33599","CVE-2024-33600","CVE-2024-33601","CVE-2024-33602"]},{"id":"RHSA-2024:1795","title":"Red Hat Security Advisory: VolSync 0.9.1 security fixes and enhancements","vulnerabilityIds":["CVE-2024-24786"]},{"id":"SUSE-SU-2024:3342-1","title":"Security update for kubernetes1.24","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-24786"]},{"id":"RHSA-2024:0041","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.0 bug fix and security update","vulnerabilityIds":["CVE-2019-25210","CVE-2023-45142","CVE-2023-45289","CVE-2023-47108","CVE-2023-48795","CVE-2023-49569","CVE-2024-0874","CVE-2024-22189","CVE-2024-24783","CVE-2024-24784","CVE-2024-24785","CVE-2024-24786","CVE-2024-28110","CVE-2024-28176","CVE-2024-28180","CVE-2024-28849","CVE-2024-29180"]},{"id":"SUSE-SU-2024:3186-1","title":"Security update for buildah","vulnerabilityIds":["CVE-2024-1753","CVE-2024-24786","CVE-2024-28180","CVE-2024-3727"]},{"id":"RHSA-2026:80657","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:0040","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.0 security and extras update","vulnerabilityIds":["CVE-2023-48795","CVE-2023-49569","CVE-2024-24786","CVE-2024-28110"]},{"id":"RHSA-2026:80693","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:80686","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"openSUSE-SU-2024:13781-1","title":"rclone-1.66.0-1.1 on GA media","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:8434","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.3 security update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:3637","title":"Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.3.0 for RHEL 9","vulnerabilityIds":["CVE-2023-45288","CVE-2023-45290","CVE-2024-24783","CVE-2024-24784","CVE-2024-24785","CVE-2024-24786"]},{"id":"RHSA-2024:6824","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.14 security update","vulnerabilityIds":["CVE-2024-3727","CVE-2024-24786","CVE-2024-43803"]},{"id":"SUSE-SU-2024:3094-1","title":"Security update for kubernetes1.26","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2024-24786"]},{"id":"RHSA-2024:2666","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.24 security and extras update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:3715","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.59 packages and security update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:6122","title":"Red Hat Security Advisory: OpenShift Container Platform 4.18.1 bug fix and security update","vulnerabilityIds":["CVE-2023-44270","CVE-2023-45288","CVE-2024-3727","CVE-2024-6104","CVE-2024-6508","CVE-2024-7387","CVE-2024-9341","CVE-2024-10963","CVE-2024-12085","CVE-2024-12698","CVE-2024-21538","CVE-2024-24786","CVE-2024-39338","CVE-2024-43803","CVE-2024-45296","CVE-2024-45338","CVE-2024-45496","CVE-2024-47211","CVE-2024-48910","CVE-2024-50311","CVE-2024-50312","CVE-2024-52798","CVE-2024-53104","CVE-2025-21613","CVE-2025-21614"]},{"id":"RHSA-2024:1537","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.38 low-latency extras security update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:80670","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:80646","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:2550","title":"Red Hat Security Advisory: buildah bug fix update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:4150","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.20 security update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2025:4204","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.27 bug fix and security update","vulnerabilityIds":["CVE-2024-24786","CVE-2025-30204"]},{"id":"WID-SEC-W-2025-0001","title":"IBM DB2: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2021-32740","CVE-2021-41186","CVE-2022-0759","CVE-2022-24795","CVE-2022-31163","CVE-2023-39325","CVE-2023-41993","CVE-2023-45283","CVE-2023-45288","CVE-2023-6597","CVE-2024-0406","CVE-2024-20918","CVE-2024-20952","CVE-2024-2398","CVE-2024-24786","CVE-2024-27281","CVE-2024-2961","CVE-2024-29857","CVE-2024-33599","CVE-2024-33883","CVE-2024-37370","CVE-2024-37371","CVE-2024-37890","CVE-2024-39338","CVE-2024-4068","CVE-2024-41110","CVE-2024-41123","CVE-2024-41946","CVE-2024-45296","CVE-2024-45491","CVE-2024-45590","CVE-2024-47220","CVE-2024-47554","CVE-2024-6119","CVE-2024-6345"]},{"id":"WID-SEC-W-2024-1474","title":"Red Hat OpenShift Container Platform: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2019-25210","CVE-2023-29483","CVE-2023-45142","CVE-2023-45289","CVE-2023-45290","CVE-2023-47108","CVE-2023-48795","CVE-2023-52425","CVE-2024-0874","CVE-2024-1394","CVE-2024-22189","CVE-2024-2398","CVE-2024-24783","CVE-2024-24784","CVE-2024-24785","CVE-2024-24786","CVE-2024-28110","CVE-2024-28176","CVE-2024-28180","CVE-2024-28757","CVE-2024-28849","CVE-2024-29180","CVE-2024-3177","CVE-2024-3727"]},{"id":"SUSE-SU-2024:3343-1","title":"Security update for kubernetes1.24","vulnerabilityIds":["CVE-2021-25743","CVE-2023-2727","CVE-2023-2728","CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-0793","CVE-2024-24786","CVE-2024-3177"]},{"id":"RHSA-2024:7184","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.38 security update","vulnerabilityIds":["CVE-2023-37788","CVE-2023-47108","CVE-2024-6104","CVE-2024-24786"]},{"id":"RHSA-2024:3316","title":"Red Hat Security Advisory: Migration Toolkit for Applications security and bug fix update","vulnerabilityIds":["CVE-2023-26159","CVE-2023-26364","CVE-2023-39326","CVE-2023-45286","CVE-2023-45287","CVE-2023-45288","CVE-2023-45857","CVE-2023-48631","CVE-2024-24786","CVE-2024-28849","CVE-2024-29180"]},{"id":"RHSA-2024:8676","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.0 Security, Enhancement, & Bug Fix Update","vulnerabilityIds":["CVE-2023-26136","CVE-2023-26364","CVE-2024-24786","CVE-2024-24789","CVE-2024-28176","CVE-2024-41818","CVE-2024-43788","CVE-2024-43796","CVE-2024-43799","CVE-2024-43800","CVE-2024-45296","CVE-2024-45590"]},{"id":"RHSA-2024:3254","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2022-2880","CVE-2022-41715","CVE-2024-1753","CVE-2024-24786","CVE-2024-28180"]},{"id":"RHSA-2024:8704","title":"Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.2 for RHEL 9","vulnerabilityIds":["CVE-2024-24786","CVE-2024-34155","CVE-2024-34158"]},{"id":"SUSE-SU-2024:3120-1","title":"Security update for buildah, docker","vulnerabilityIds":["CVE-2024-1753","CVE-2024-23651","CVE-2024-23652","CVE-2024-23653","CVE-2024-24786","CVE-2024-28180","CVE-2024-3727","CVE-2024-41110"]},{"id":"RHSA-2024:1456","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.38 packages and security update","vulnerabilityIds":["CVE-2024-24786","CVE-2024-28180"]},{"id":"RHSA-2024:4626","title":"Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.11.6 security update","vulnerabilityIds":["CVE-2024-24786","CVE-2024-25620","CVE-2024-26147"]},{"id":"RHSA-2026:80654","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:76430","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786","CVE-2026-13719","CVE-2026-13720","CVE-2026-56851","CVE-2026-61801","CVE-2026-76154","CVE-2026-81841","CVE-2026-97394","CVE-2026-101899"]},{"id":"RHSA-2024:1616","title":"Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.1.1 for RHEL 9","vulnerabilityIds":["CVE-2023-45288","CVE-2023-45290","CVE-2024-24783","CVE-2024-24784","CVE-2024-24785","CVE-2024-24786"]},{"id":"RHSA-2024:4591","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.0 security, enhancement & bug fix update","vulnerabilityIds":["CVE-2023-43646","CVE-2023-47108","CVE-2024-1394","CVE-2024-5042","CVE-2024-24783","CVE-2024-24785","CVE-2024-24786","CVE-2024-28176","CVE-2024-28180","CVE-2024-28863","CVE-2024-37890"]},{"id":"RHSA-2024:4163","title":"Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.12.4 security update","vulnerabilityIds":["CVE-2024-24786","CVE-2024-25620","CVE-2024-26147"]},{"id":"RHSA-2024:10147","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.24 security update","vulnerabilityIds":["CVE-2024-9341","CVE-2024-9407","CVE-2024-24786"]},{"id":"RHSA-2024:1574","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.54 packages and security update","vulnerabilityIds":["CVE-2024-1394","CVE-2024-24786","CVE-2024-28180"]},{"id":"RHSA-2024:1765","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.21 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2024-24786","CVE-2024-26602"]},{"id":"RHSA-2026:80660","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"SUSE-SU-2024:2050-1","title":"Security update for podman","vulnerabilityIds":["CVE-2024-24786","CVE-2024-3727"]},{"id":"RHSA-2024:1859","title":"Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.1 security and bug fix update","vulnerabilityIds":["CVE-2023-39326","CVE-2023-45142","CVE-2023-45287","CVE-2023-48795","CVE-2024-24786","CVE-2024-28180"]},{"id":"RHSA-2024:0045","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.0 security update","vulnerabilityIds":["CVE-2023-29483","CVE-2023-45289","CVE-2023-45290","CVE-2024-3727","CVE-2024-24783","CVE-2024-24784","CVE-2024-24785","CVE-2024-24786","CVE-2024-28176"]},{"id":"RHSA-2026:80652","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:3868","title":"Red Hat Security Advisory: Network Observability 1.6.0 for OpenShift","vulnerabilityIds":["CVE-2023-39326","CVE-2023-42282","CVE-2023-45289","CVE-2023-45290","CVE-2024-24783","CVE-2024-24785","CVE-2024-24786","CVE-2024-28849","CVE-2024-29041","CVE-2024-29180"]},{"id":"RHSA-2026:80651","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"openSUSE-SU-2024:13838-1","title":"kubernetes1.26-apiserver-1.26.15-1.1 on GA media","vulnerabilityIds":["CVE-2024-24786"]},{"id":"WID-SEC-W-2024-0518","title":"Golang Go: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","vulnerabilityIds":["CVE-2023-45289","CVE-2023-45290","CVE-2024-24783","CVE-2024-24786"]},{"id":"RHSA-2026:80668","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:72489","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","vulnerabilityIds":["CVE-2024-24786","CVE-2026-93450"]},{"id":"RHSA-2026:76677","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786","CVE-2026-56851","CVE-2026-61801","CVE-2026-95502","CVE-2026-97394","CVE-2026-100347","CVE-2026-100348","CVE-2026-100349","CVE-2026-100350","CVE-2026-100351","CVE-2026-101899","CVE-2026-109855"]},{"id":"RHSA-2024:3634","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update","vulnerabilityIds":["CVE-2023-48795","CVE-2024-22201","CVE-2024-23899","CVE-2024-23900","CVE-2024-24786","CVE-2024-28149","CVE-2024-34144","CVE-2024-34145"]},{"id":"RHSA-2024:1474","title":"Red Hat Security Advisory: logging for Red Hat OpenShift security update","vulnerabilityIds":["CVE-2024-24786","CVE-2024-28849"]},{"id":"RHSA-2024:6221","title":"Red Hat Security Advisory: The Red Hat OpenShift Builds 1.1.0 General Availability","vulnerabilityIds":["CVE-2023-45288","CVE-2023-45290","CVE-2023-49569","CVE-2024-24783","CVE-2024-24785","CVE-2024-24786","CVE-2024-24788"]},{"id":"RHSA-2024:9615","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.23 bug fix and security update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:1563","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.6 packages and security update","vulnerabilityIds":["CVE-2024-1394","CVE-2024-24786","CVE-2024-28180"]},{"id":"RHSA-2024:1559","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.6 bug fix and security update","vulnerabilityIds":["CVE-2024-1725","CVE-2024-24786"]},{"id":"RHSA-2026:80653","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"SUSE-SU-2024:3097-1","title":"Security update for kubernetes1.28","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-24786"]},{"id":"openSUSE-SU-2025:14663-1","title":"velociraptor-0.7.0.4.git142.862ef23-1.1 on GA media","vulnerabilityIds":["CVE-2023-1732","CVE-2023-44270","CVE-2023-45133","CVE-2023-45683","CVE-2023-46234","CVE-2024-21538","CVE-2024-23331","CVE-2024-24786","CVE-2024-28180","CVE-2024-31207","CVE-2024-37298","CVE-2024-4067","CVE-2024-4068","CVE-2024-42459","CVE-2024-42460","CVE-2024-42461","CVE-2024-45296","CVE-2024-45338","CVE-2024-45811","CVE-2024-45812","CVE-2024-47068","CVE-2024-47875","CVE-2024-48948","CVE-2024-48949","CVE-2024-51744","CVE-2024-55565","CVE-2024-6104"]},{"id":"WID-SEC-W-2024-1307","title":"Red Hat OpenShift Service Mesh Containers: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2021-25220","CVE-2021-43618","CVE-2021-46848","CVE-2022-1271","CVE-2022-2795","CVE-2022-3094","CVE-2022-36227","CVE-2022-47024","CVE-2022-47629","CVE-2022-48303","CVE-2022-48468","CVE-2022-48554","CVE-2022-48624","CVE-2023-22745","CVE-2023-2602","CVE-2023-2603","CVE-2023-29491","CVE-2023-2975","CVE-2023-3446","CVE-2023-36054","CVE-2023-3817","CVE-2023-39975","CVE-2023-4408","CVE-2023-44487","CVE-2023-45288","CVE-2023-4641","CVE-2023-4692","CVE-2023-4693","CVE-2023-47038","CVE-2023-50387","CVE-2023-50868","CVE-2023-5517","CVE-2023-5678","CVE-2023-5679","CVE-2023-6004","CVE-2023-6129","CVE-2023-6237","CVE-2023-6516","CVE-2023-6597","CVE-2023-6918","CVE-2023-7008","CVE-2023-7104","CVE-2024-0450","CVE-2024-0727","CVE-2024-1048","CVE-2024-1313","CVE-2024-1394","CVE-2024-22195","CVE-2024-22365","CVE-2024-24786","CVE-2024-25062","CVE-2024-26458","CVE-2024-26461","CVE-2024-28834","CVE-2024-28835","CVE-2024-2961","CVE-2024-33599","CVE-2024-33600","CVE-2024-33601","CVE-2024-33602"]},{"id":"RHSA-2024:1461","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.18 packages and security update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:5013","title":"Red Hat Security Advisory: The Red Hat OpenShift Builds Client 1.1.0 General Availability","vulnerabilityIds":["CVE-2023-45288","CVE-2023-45290","CVE-2023-49569","CVE-2024-24783","CVE-2024-24785","CVE-2024-24786","CVE-2024-24788"]},{"id":"RHSA-2024:1507","title":"Red Hat Security Advisory: logging for Red Hat OpenShift security update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:1362","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.17 low-latency extras security update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:4455","title":"Red Hat Security Advisory: OpenShift Virtualization 4.16.0 Images security update","vulnerabilityIds":["CVE-2023-45857","CVE-2024-24786","CVE-2024-28180"]},{"id":"RHSA-2025:22684","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes 2.12.6 security update","vulnerabilityIds":["CVE-2022-21698","CVE-2024-24786","CVE-2025-7195","CVE-2025-27144","CVE-2025-47907","CVE-2025-53547","CVE-2025-58754"]},{"id":"RHSA-2024:3718","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.0 bug fix and security update","vulnerabilityIds":["CVE-2023-3775","CVE-2023-5077","CVE-2023-5954","CVE-2023-48795","CVE-2024-3727","CVE-2024-7387","CVE-2024-24786","CVE-2024-24789","CVE-2024-25620","CVE-2024-28180","CVE-2024-45496"]},{"id":"msrc_CVE-2024-24786","title":"Infinite loop in JSON unmarshaling in google.golang.org/protobuf","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2025:2449","title":"Red Hat Security Advisory: OpenShift Container Platform 4.18.4 security update","vulnerabilityIds":["CVE-2024-0406","CVE-2024-9675","CVE-2024-24786","CVE-2024-45338","CVE-2024-50302","CVE-2025-24976"]},{"id":"RHSA-2024:1925","title":"Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.8.3 security and bug fix update","vulnerabilityIds":["CVE-2023-45857","CVE-2024-24786"]},{"id":"RHSA-2025:0664","title":"Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.35.0 security update & enhancements","vulnerabilityIds":["CVE-2024-24786","CVE-2024-40094","CVE-2024-45296"]},{"id":"RHSA-2024:2548","title":"Red Hat Security Advisory: podman security and bug fix update","vulnerabilityIds":["CVE-2024-1753","CVE-2024-24786"]},{"id":"RHSA-2026:80666","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:89715","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.74 bug fix and security update","vulnerabilityIds":["CVE-2024-24786","CVE-2026-14362","CVE-2026-33814","CVE-2026-39829","CVE-2026-42151","CVE-2026-46597","CVE-2026-49329","CVE-2026-59887","CVE-2026-75888","CVE-2026-83589","CVE-2026-84292","CVE-2026-93017","CVE-2026-111943"]},{"id":"RHSA-2024:2096","title":"Red Hat Security Advisory: security update Logging for Red Hat OpenShift - 5.9.1","vulnerabilityIds":["CVE-2023-45289","CVE-2023-45290","CVE-2024-24783","CVE-2024-24785","CVE-2024-24786","CVE-2024-28180"]},{"id":"RHSA-2024:8415","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.19 bug fix and security update","vulnerabilityIds":["CVE-2024-6508","CVE-2024-24786","CVE-2024-47211"]},{"id":"RHSA-2025:9776","title":"Red Hat Security Advisory: New RHCS 8.1 container image is now available in the Red Hat Ecosystem Catalog.","vulnerabilityIds":["CVE-2022-23491","CVE-2023-45290","CVE-2024-6104","CVE-2024-24783","CVE-2024-24784","CVE-2024-24785","CVE-2024-24786","CVE-2024-24788","CVE-2024-24789","CVE-2024-24790","CVE-2024-24791","CVE-2024-34155","CVE-2024-34156"]},{"id":"RHSA-2024:5422","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.8 bug fix and security update","vulnerabilityIds":["CVE-2024-24786","CVE-2024-36971"]},{"id":"RHSA-2024:4246","title":"Red Hat Security Advisory: container-tools security update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"SUSE-SU-2024:2031-1","title":"Security update for podman","vulnerabilityIds":["CVE-2024-24786","CVE-2024-3727"]},{"id":"RHSA-2026:77895","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:7922","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.1 bug fix and security update","vulnerabilityIds":["CVE-2023-3462","CVE-2023-45290","CVE-2024-3727","CVE-2024-6345","CVE-2024-6508","CVE-2024-24786","CVE-2024-24791","CVE-2024-27289","CVE-2024-45296"]},{"id":"RHSA-2024:4597","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update","vulnerabilityIds":["CVE-2023-48795","CVE-2024-21626","CVE-2024-22201","CVE-2024-23899","CVE-2024-23900","CVE-2024-24786","CVE-2024-28149","CVE-2024-34144","CVE-2024-34145"]},{"id":"RHSA-2024:8677","title":"Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.12.6 security update","vulnerabilityIds":["CVE-2024-6104","CVE-2024-24786","CVE-2024-28849","CVE-2024-43796","CVE-2024-43799","CVE-2024-43800","CVE-2024-45590"]},{"id":"RHSA-2024:3683","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.2 security update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"SUSE-SU-2024:2050-2","title":"Security update for podman","vulnerabilityIds":["CVE-2024-24786","CVE-2024-3727"]},{"id":"RHSA-2026:80643","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:6409","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.31 bug fix and security update","vulnerabilityIds":["CVE-2023-47108","CVE-2024-6104","CVE-2024-24786"]},{"id":"RHSA-2026:80656","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:80677","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786","CVE-2026-109574","CVE-2026-109595","CVE-2026-109596","CVE-2026-109597"]},{"id":"RHSA-2024:1363","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.3 low-latency extras security update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:1946","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.1 security update","vulnerabilityIds":["CVE-2023-26159","CVE-2024-24786","CVE-2024-28180","CVE-2024-28849"]},{"id":"RHSA-2024:3635","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update","vulnerabilityIds":["CVE-2023-48795","CVE-2024-22201","CVE-2024-23899","CVE-2024-23900","CVE-2024-24786","CVE-2024-28149","CVE-2024-34144","CVE-2024-34145"]},{"id":"openSUSE-SU-2024:13841-1","title":"kubernetes1.29-apiserver-1.29.3-1.1 on GA media","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:7548","title":"Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.2.0 for RHEL 9","vulnerabilityIds":["CVE-2023-45290","CVE-2024-24786","CVE-2024-24788","CVE-2024-24790","CVE-2024-24791"]},{"id":"RHSA-2024:4028","title":"Red Hat Security Advisory: Release of OpenShift Serverless 1.33.0 security update & enhancements","vulnerabilityIds":["CVE-2023-45289","CVE-2024-2700","CVE-2024-24783","CVE-2024-24784","CVE-2024-24785","CVE-2024-24786","CVE-2024-28180","CVE-2024-29025"]},{"id":"RHSA-2024:3717","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.0 security and extras update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:2781","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.57 security update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:80649","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:80632","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:80676","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:72493","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","vulnerabilityIds":["CVE-2024-24786","CVE-2026-63209","CVE-2026-93450"]},{"id":"RHSA-2024:1538","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12 low-latency extras security update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"SUSE-SU-2024:2090-1","title":"Security update for podman","vulnerabilityIds":["CVE-2024-24786","CVE-2024-3727"]},{"id":"RHSA-2024:3636","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update","vulnerabilityIds":["CVE-2023-48795","CVE-2024-22201","CVE-2024-23899","CVE-2024-23900","CVE-2024-24786","CVE-2024-28149","CVE-2024-34144","CVE-2024-34145"]},{"id":"RHSA-2026:80647","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHBA-2024:8188","title":"Red Hat Bug Fix Advisory: LVMS 4.15.8 Bug Fix Update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2025:0654","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.14 bug fix and security update","vulnerabilityIds":["CVE-2023-44270","CVE-2024-24786","CVE-2024-45338","CVE-2024-48910","CVE-2024-55565","CVE-2025-21613","CVE-2025-21614"]},{"id":"RHSA-2024:10852","title":"Red Hat Security Advisory: RHOAI 2.16.0 - Red Hat OpenShift AI","vulnerabilityIds":["CVE-2024-3596","CVE-2024-10963","CVE-2024-24786","CVE-2024-49767"]},{"id":"RHSA-2026:80672","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHBA-2024:8194","title":"Red Hat Bug Fix Advisory: LVMS 4.14.10 Bug Fix Update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:6004","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.10 bug fix and security update","vulnerabilityIds":["CVE-2023-45288","CVE-2024-1737","CVE-2024-1975","CVE-2024-4076","CVE-2024-6104","CVE-2024-24786","CVE-2024-24789"]},{"id":"RHSA-2024:1665","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.8.6 security and bug fix updates","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:3621","title":"Red Hat Security Advisory: Red Hat OpenShift distributed tracing 3.2.0 operator/operand containers update","vulnerabilityIds":["CVE-2023-45286","CVE-2023-45288","CVE-2023-45289","CVE-2023-45290","CVE-2024-24783","CVE-2024-24784","CVE-2024-24785","CVE-2024-24786"]},{"id":"RHSA-2024:2773","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.13 bug fix and security update","vulnerabilityIds":["CVE-2023-37788","CVE-2023-45142","CVE-2023-45288","CVE-2023-47108","CVE-2024-24786","CVE-2024-28180"]},{"id":"RHSA-2024:1508","title":"Red Hat Security Advisory: logging for Red Hat OpenShift security update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHBA-2024:10217","title":"Red Hat Bug Fix Advisory: New Red Hat Ceph Storage 8.0 container image is now available.","vulnerabilityIds":["CVE-2024-24786"]},{"id":"SUSE-SU-2025:20013-1","title":"Security update for podman","vulnerabilityIds":["CVE-2024-1753","CVE-2024-24786","CVE-2024-3727","CVE-2024-6104"]},{"id":"RHSA-2024:2874","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.42 security and extras update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:2639","title":"Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.15 security and bug fix update","vulnerabilityIds":["CVE-2024-24786","CVE-2024-28180"]},{"id":"RHSA-2024:8040","title":"Red Hat Security Advisory: Cluster Observability Operator 0.4.1","vulnerabilityIds":["CVE-2024-6104","CVE-2024-24786"]},{"id":"RHSA-2024:0043","title":"Red Hat Security Advisory: Red Hat build of MicroShift 4.16.0 security update","vulnerabilityIds":["CVE-2024-3177","CVE-2024-24786"]},{"id":"RHSA-2026:80658","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"NCSC-2025-0021","title":"Kwetsbaarheden verholpen in Oracle Communications","vulnerabilityIds":["CVE-2022-41727","CVE-2023-4408","CVE-2023-5678","CVE-2023-5981","CVE-2023-6597","CVE-2023-7256","CVE-2023-29407","CVE-2023-29408","CVE-2023-40577","CVE-2023-46218","CVE-2023-46219","CVE-2023-46604","CVE-2023-50868","CVE-2024-0232","CVE-2024-0397","CVE-2024-0450","CVE-2024-1442","CVE-2024-2961","CVE-2024-3596","CVE-2024-4030","CVE-2024-4032","CVE-2024-5535","CVE-2024-6119","CVE-2024-6162","CVE-2024-6232","CVE-2024-7254","CVE-2024-7592","CVE-2024-7885","CVE-2024-8006","CVE-2024-9143","CVE-2024-22195","CVE-2024-24786","CVE-2024-24791","CVE-2024-25638","CVE-2024-25710","CVE-2024-26308","CVE-2024-27309","CVE-2024-28219","CVE-2024-28834","CVE-2024-28835","CVE-2024-28849","CVE-2024-29025","CVE-2024-29131","CVE-2024-29133","CVE-2024-33599","CVE-2024-33600","CVE-2024-33601","CVE-2024-33602","CVE-2024-34064","CVE-2024-34750","CVE-2024-35195","CVE-2024-37370","CVE-2024-37371","CVE-2024-37891","CVE-2024-38475","CVE-2024-38807","CVE-2024-38809","CVE-2024-38816","CVE-2024-38819","CVE-2024-38820","CVE-2024-38827","CVE-2024-38998","CVE-2024-38999","CVE-2024-41817","CVE-2024-45490","CVE-2024-45491","CVE-2024-45492","CVE-2024-47535","CVE-2024-47554","CVE-2024-47561","CVE-2024-47803","CVE-2024-47804","CVE-2024-49766","CVE-2024-49767","CVE-2024-50379","CVE-2024-50602","CVE-2024-53677","CVE-2024-54677","CVE-2024-56337","CVE-2025-21542","CVE-2025-21544","CVE-2025-21554"]},{"id":"RHSA-2026:80650","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:80637","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:80661","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:76876","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:2549","title":"Red Hat Security Advisory: skopeo security and bug fix update","vulnerabilityIds":["CVE-2024-24786","CVE-2024-28180"]},{"id":"RHSA-2024:1874","title":"Red Hat Security Advisory: rhc-worker-script security and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:72496","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","vulnerabilityIds":["CVE-2024-24786","CVE-2026-56851","CVE-2026-63209","CVE-2026-93450"]},{"id":"SUSE-SU-2024:3098-1","title":"Security update for kubernetes1.27","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-24786"]},{"id":"RHSA-2026:0722","title":"Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.4 security update","vulnerabilityIds":["CVE-2022-21698","CVE-2023-44487","CVE-2024-24786","CVE-2025-7195","CVE-2025-9287","CVE-2025-9288","CVE-2025-30204","CVE-2025-47907","CVE-2025-58183"]},{"id":"RHSA-2026:80659","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"WID-SEC-W-2025-0135","title":"Oracle Communications Applications: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2023-29408","CVE-2024-0232","CVE-2024-1442","CVE-2024-24786","CVE-2024-26308","CVE-2024-27309","CVE-2024-28849","CVE-2024-29025","CVE-2024-29133","CVE-2024-35195","CVE-2024-37371","CVE-2024-37891","CVE-2024-38807","CVE-2024-38827","CVE-2024-47535","CVE-2024-47554","CVE-2024-47561","CVE-2024-6162","CVE-2024-7254","CVE-2024-7592","CVE-2025-21542","CVE-2025-21544","CVE-2025-21554"]},{"id":"RHBA-2025:1772","title":"Red Hat Bug Fix Advisory: Updated 7.1 container image is now available in the Red Hat Ecosystem Catalog","vulnerabilityIds":["CVE-2023-45287","CVE-2023-45288","CVE-2024-24786","CVE-2024-28176","CVE-2024-28180","CVE-2024-30255","CVE-2024-34155","CVE-2024-34156","CVE-2024-41184"]},{"id":"openSUSE-SU-2024:13814-1","title":"buildah-1.35.3-1.1 on GA media","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2024:3617","title":"Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.1 for RHEL 9","vulnerabilityIds":["CVE-2023-45290","CVE-2024-24783","CVE-2024-24784","CVE-2024-24785","CVE-2024-24786"]},{"id":"RHEA-2024:4835","title":"Red Hat Enhancement Advisory: OpenShift Virtualization 4.14.7 Images","vulnerabilityIds":["CVE-2024-24786"]},{"id":"SUSE-SU-2024:3344-1","title":"Security update for kubernetes1.25","vulnerabilityIds":["CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-24786"]},{"id":"RHSA-2026:72570","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","vulnerabilityIds":["CVE-2024-24786","CVE-2026-21729","CVE-2026-56851","CVE-2026-63209","CVE-2026-93450"]},{"id":"SUSE-SU-2024:3341-1","title":"Security update for kubernetes1.23","vulnerabilityIds":["CVE-2021-25743","CVE-2023-2727","CVE-2023-2728","CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-0793","CVE-2024-24786","CVE-2024-3177"]},{"id":"RHSA-2025:22683","title":"Red Hat Security Advisory: multicluster engine for Kubernetes v2.7.7 security update","vulnerabilityIds":["CVE-2022-21698","CVE-2024-24786","CVE-2025-7195","CVE-2025-22871"]},{"id":"openSUSE-SU-2024:13839-1","title":"kubernetes1.27-apiserver-1.27.12-1.1 on GA media","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:80683","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]},{"id":"RHSA-2026:76448","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786","CVE-2026-13719","CVE-2026-13720","CVE-2026-56851","CVE-2026-61801","CVE-2026-81841","CVE-2026-97394","CVE-2026-101899"]},{"id":"RHSA-2024:2901","title":"Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.12.1-394 Security Update","vulnerabilityIds":["CVE-2023-45288","CVE-2023-45289","CVE-2023-45290","CVE-2024-24783","CVE-2024-24785","CVE-2024-24786"]},{"id":"RHSA-2026:80682","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2024-24786"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2024-0879","identifiers":["EUVD-2024-0879","CVE-2024-24786","GHSA-8r3f-844c-mc37"]},"retained":false,"historicalAffected":[]},{"revision":"232fe025d5324e419721bd505ce2e5ba","observedAt":"2026-10-24T23:17:28.568+00:00","statement":{"source":"nvd","id":"CVE-2024-24786","aliases":[],"title":"The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.…","description":"The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.","state":0,"publishedAt":"2024-03-05T23:15:07.82+00:00","modifiedAt":"2026-09-23T14:17:06.307+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"}],"references":["http://www.openwall.com/lists/oss-security/2024/03/08/4","https://go.dev/cl/569356","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDMBHAVSDU2FBDZ45U3A2VLSM35OJ2HU/","https://pkg.go.dev/vuln/GO-2024-2611","https://security.netapp.com/advisory/ntap-20240517-0002/"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-24786","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Deferred","weaknesses":[],"productCriteria":[],"sourceDates":{"published":"2024-03-05T23:15:07.820","lastModified":"2026-09-23T14:17:06.307"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2024-24786","identifiers":["CVE-2024-24786"]},"retained":false,"historicalAffected":[]},{"revision":"b958aaf64e07456a9d3e17d9e66d7290","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-8r3f-844c-mc37","aliases":["CVE-2024-24786","GO-2024-2611"],"title":"Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON","description":"The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.","state":0,"publishedAt":"2024-03-06T00:31:27+00:00","modifiedAt":"2026-09-10T03:50:00.2439239+00:00","affected":[{"ecosystem":"Go","name":"google.golang.org/protobuf","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.33.0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"google.golang.org/protobuf/encoding/protojson","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.33.0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"google.golang.org/protobuf/internal/encoding/json","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.33.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":null,"severity":null},{"system":"CVSS_V4","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"MODERATE"}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2024-24786","https://github.com/protocolbuffers/protobuf-go/commit/f01a588e5810b90996452eec4a28f22a0afae023","https://github.com/protocolbuffers/protobuf-go","https://github.com/protocolbuffers/protobuf-go/releases/tag/v1.33.0","https://go.dev/cl/569356","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDMBHAVSDU2FBDZ45U3A2VLSM35OJ2HU","https://pkg.go.dev/vuln/GO-2024-2611","https://security.netapp.com/advisory/ntap-20240517-0002","http://www.openwall.com/lists/oss-security/2024/03/08/4"],"sourceUrl":"https://github.com/advisories/GHSA-8r3f-844c-mc37","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-8r3f-844c-mc37","identifiers":["GHSA-8r3f-844c-mc37","CVE-2024-24786","GO-2024-2611"]},"retained":false,"historicalAffected":[]},{"revision":"43171a774a28489c887306a2666e6c3c","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2024-2611","aliases":["CVE-2024-24786","GHSA-8r3f-844c-mc37"],"title":"Infinite loop in JSON unmarshaling in google.golang.org/protobuf","description":"The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.","state":0,"publishedAt":"2024-03-05T20:24:05+00:00","modifiedAt":"2026-10-14T10:56:59.7521457+00:00","affected":[{"ecosystem":"Go","name":"google.golang.org/protobuf","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.33.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://go.dev/cl/569356"],"sourceUrl":"https://osv.dev/vulnerability/GO-2024-2611","license":"OSV · upstream source license applies","key":"osv:GO-2024-2611","identifiers":["GO-2024-2611","CVE-2024-24786","GHSA-8r3f-844c-mc37"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-10T05:04:17.0540934+00:00","complete":true,"records":1773,"lastAttemptAt":"2026-11-10T05:04:17.0540934+00:00","lastSuccessAt":"2026-11-10T05:04:18.9657904+00:00","error":null,"lastVerifiedAt":"2026-11-10T05:04:18.9657907+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-8859cf40d4337e24bd2f258cc7778fbad01bb24c79d057aaf34cf1dfc6f8917d-77fffadfbb8fd9043950d68e58e30483f52900409642c6b646065548479c26cc","complete":true,"records":421868,"lastAttemptAt":"2026-11-10T05:02:16.4823631+00:00","lastSuccessAt":"2026-11-10T05:02:16.4560546+00:00","error":null,"lastVerifiedAt":"2026-11-10T05:02:16.4823631+00:00","snapshotPublishedAt":"2026-11-10T04:28:56+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-a6dc967b5ceb4c488191e8f172ded5d6","complete":true,"records":13689,"lastAttemptAt":"2026-11-10T05:06:09.4504083+00:00","lastSuccessAt":"2026-11-10T03:04:49.903+00:00","error":null,"lastVerifiedAt":"2026-11-10T03:04:49.903+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13742,"expectedIdentifiers":13742,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-10T05:04:17.0540934+00:00","complete":true,"records":1096,"lastAttemptAt":"2026-11-10T05:04:17.0540934+00:00","lastSuccessAt":"2026-11-10T05:04:18.9669147+00:00","error":null,"lastVerifiedAt":"2026-11-10T05:04:18.9669149+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-0cb393c0854647ceaeade74220bf537d","complete":false,"records":13695,"lastAttemptAt":"2026-11-10T05:06:08.8352765+00:00","lastSuccessAt":"2026-11-10T05:06:08.831+00:00","error":"100 identifier lookups failed; latest failures include request timeout. Other identifiers were checked independently.","lastVerifiedAt":"2026-11-10T05:06:08.831+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13642,"expectedIdentifiers":13742,"failedIdentifiers":100},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-cdffb4589856378aa42e8d1bd4a6c74e27a180d8160bf764c44715ef760f0a62","complete":true,"records":9932,"lastAttemptAt":"2026-11-10T05:04:16.277674+00:00","lastSuccessAt":"2026-11-10T00:04:19.8260565+00:00","error":null,"lastVerifiedAt":"2026-11-10T05:04:16.277674+00:00","snapshotPublishedAt":"2026-11-09T23:48:01+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-26503967ae4379db8f374089589d6e03fb15bd31f820c9e992aaf93840c2236c","complete":true,"records":1971,"lastAttemptAt":"2026-11-10T05:02:16.7857429+00:00","lastSuccessAt":"2026-11-09T21:02:20.472473+00:00","error":null,"lastVerifiedAt":"2026-11-10T05:02:16.7857429+00:00","snapshotPublishedAt":"2026-11-09T20:18:18+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-761ecc9061239b0da572dc9254c6f384c1d19339eb08408c436647a2f26129e9","complete":true,"records":3064,"lastAttemptAt":"2026-11-10T05:04:16.6684448+00:00","lastSuccessAt":"2026-11-09T17:05:03.4044794+00:00","error":null,"lastVerifiedAt":"2026-11-10T05:04:16.6684448+00:00","snapshotPublishedAt":"2026-11-09T16:33:20+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-df80ce3f4ee69a086fc0f8e2d917e586081af2af4d81ef20f64f97855436e748","complete":true,"records":231583,"lastAttemptAt":"2026-11-10T05:04:16.1480624+00:00","lastSuccessAt":"2026-11-10T05:04:14.7294031+00:00","error":null,"lastVerifiedAt":"2026-11-10T05:04:16.1480624+00:00","snapshotPublishedAt":"2026-11-10T04:33:09+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}