CVE-2026-27145: Software Security Vulnerability Vulnerability

MODERATE
Advisory Identifier: GHSA-4279-q6mj-392r
Share
CVSS 6.5
CWE-606
Published
Advisory Summary

CVE-2026-27145 is a MODERATE (CVSS 6.5) security vulnerability vulnerability (CWE-606: Unchecked Input for Loop Condition) affecting Software libraries in the Maven ecosystem. The weakness occurs when the product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.. Remediation is available in the latest vendor maintenance releases.

CVE-2026-27145 at a Glance

CVE Identifier CVE-2026-27145
GHSA Identifier GHSA-4279-q6mj-392r
Severity MODERATE
CVSS v3.1 Base Score 6.5
CWE Classification CWE-606: Unchecked Input for Loop Condition
Affected Product Software
Package Ecosystem Maven
Published Date
Last Updated

Security Impact

CVSS: 6.5

The security impact metrics below are parsed directly from the CVSS v3.1 vector string (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).

Attack Vector Network (AV:N)
Attack Complexity High (AC:H)
Privileges Required None (PR:N)
User Interaction None (UI:N)
Scope Unchanged (S:U)
Confidentiality None (C:N)
Integrity Low (I:L)
Availability High (A:H)

How to Fix CVE-2026-27145

To remediate this vulnerability, upgrade all affected Software dependencies to a patched release. Both direct and transitive dependencies should be checked, as frameworks or security libraries may pull in vulnerable versions transitively.

Verify Direct and Transitive Dependencies

Run the following command in your project directory to verify that all resolved dependencies use the patched release: 

mvn dependency:tree

How to Check if You Are Affected

To determine whether your Java application is affected by CVE-2026-27145, inspect your build dependencies using the Maven Dependency Plugin:

mvn dependency:tree

Analyze the terminal output to locate any version of Software in your dependency tree. If any resolved version matches the vulnerable ranges listed in the table below (for example, versions earlier than the patched release), your application is affected.

Note: The mvn dependency:tree command inspects the resolved dependency graph declared in your project's POM files; it does not perform automated security scanning or inspect runtime dynamic classpaths. Always verify runtime container classpaths and shaded JARs.

Technical Details

Vulnerability Mechanism & Technical Analysis

This vulnerability is classified under CWE-606: Unchecked Input for Loop Condition, where the product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping. In Software, software state validation or input boundaries are circumvented during processing. Review the official source advisory statement below for specific affected components, classes, and reproduction details.

Source Advisory Statement

(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.

References

NVD — CVE-2026-27145 NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-27145
access.redhat.com/errata/rhsa-2026:59... WEB
https://access.redhat.com/errata/RHSA-2026:59557
access.redhat.com/errata/rhsa-2026:59... WEB
https://access.redhat.com/errata/RHSA-2026:59556
access.redhat.com/errata/rhsa-2026:57... WEB
https://access.redhat.com/errata/RHSA-2026:57649
access.redhat.com/errata/rhsa-2026:57... WEB
https://access.redhat.com/errata/RHSA-2026:57488
access.redhat.com/errata/rhsa-2026:57... WEB
https://access.redhat.com/errata/RHSA-2026:57482
access.redhat.com/errata/rhsa-2026:57... WEB
https://access.redhat.com/errata/RHSA-2026:57194
access.redhat.com/errata/rhsa-2026:55... WEB
https://access.redhat.com/errata/RHSA-2026:55899
access.redhat.com/errata/rhsa-2026:54... WEB
https://access.redhat.com/errata/RHSA-2026:54757
access.redhat.com/errata/rhsa-2026:54... WEB
https://access.redhat.com/errata/RHSA-2026:54603
access.redhat.com/errata/rhsa-2026:54... WEB
https://access.redhat.com/errata/RHSA-2026:54531
access.redhat.com/errata/rhsa-2026:54... WEB
https://access.redhat.com/errata/RHSA-2026:54525
access.redhat.com/errata/rhsa-2026:54... WEB
https://access.redhat.com/errata/RHSA-2026:54500
access.redhat.com/errata/rhsa-2026:54... WEB
https://access.redhat.com/errata/RHSA-2026:54441
access.redhat.com/errata/rhsa-2026:54... WEB
https://access.redhat.com/errata/RHSA-2026:54435
access.redhat.com/errata/rhsa-2026:54... WEB
https://access.redhat.com/errata/RHSA-2026:54432
access.redhat.com/errata/rhsa-2026:54... WEB
https://access.redhat.com/errata/RHSA-2026:54427
access.redhat.com/errata/rhsa-2026:54... WEB
https://access.redhat.com/errata/RHSA-2026:54401
access.redhat.com/errata/rhsa-2026:54... WEB
https://access.redhat.com/errata/RHSA-2026:54168
access.redhat.com/errata/rhsa-2026:53... WEB
https://access.redhat.com/errata/RHSA-2026:53530
access.redhat.com/errata/rhsa-2026:53... WEB
https://access.redhat.com/errata/RHSA-2026:53416
access.redhat.com/errata/rhsa-2026:53... WEB
https://access.redhat.com/errata/RHSA-2026:53415
access.redhat.com/errata/rhsa-2026:53... WEB
https://access.redhat.com/errata/RHSA-2026:53413
access.redhat.com/errata/rhsa-2026:53... WEB
https://access.redhat.com/errata/RHSA-2026:53412
access.redhat.com/errata/rhsa-2026:53... WEB
https://access.redhat.com/errata/RHSA-2026:53374
access.redhat.com/errata/rhsa-2026:52... WEB
https://access.redhat.com/errata/RHSA-2026:52946
Software Security Information SECURITY
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json
pkg.go.dev/vuln/go-2026-5037 WEB
https://pkg.go.dev/vuln/GO-2026-5037
groups.google.com/g/golang-announce/c... WEB
https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw
go.dev/issue/79694 WEB
https://go.dev/issue/79694
go.dev/cl/783621 WEB
https://go.dev/cl/783621
bugzilla.redhat.com/show_bug.cgi WEB
https://bugzilla.redhat.com/show_bug.cgi?id=2484207
Software Security Information SECURITY
https://access.redhat.com/security/cve/CVE-2026-27145
access.redhat.com/errata/rhsa-2026:68... WEB
https://access.redhat.com/errata/RHSA-2026:68335
access.redhat.com/errata/rhsa-2026:68... WEB
https://access.redhat.com/errata/RHSA-2026:68334
access.redhat.com/errata/rhsa-2026:66... WEB
https://access.redhat.com/errata/RHSA-2026:66022
access.redhat.com/errata/rhsa-2026:63... WEB
https://access.redhat.com/errata/RHSA-2026:63016
access.redhat.com/errata/rhsa-2026:61... WEB
https://access.redhat.com/errata/RHSA-2026:61314
access.redhat.com/errata/rhsa-2026:61... WEB
https://access.redhat.com/errata/RHSA-2026:61253
access.redhat.com/errata/rhsa-2026:60... WEB
https://access.redhat.com/errata/RHSA-2026:60391
access.redhat.com/errata/rhsa-2026:60... WEB
https://access.redhat.com/errata/RHSA-2026:60390
access.redhat.com/errata/rhsa-2026:60... WEB
https://access.redhat.com/errata/RHSA-2026:60388
access.redhat.com/errata/rhsa-2026:60... WEB
https://access.redhat.com/errata/RHSA-2026:60387
access.redhat.com/errata/rhsa-2026:60... WEB
https://access.redhat.com/errata/RHSA-2026:60386
access.redhat.com/errata/rhsa-2026:60... WEB
https://access.redhat.com/errata/RHSA-2026:60354
access.redhat.com/errata/rhsa-2026:60... WEB
https://access.redhat.com/errata/RHSA-2026:60315
access.redhat.com/errata/rhsa-2026:60... WEB
https://access.redhat.com/errata/RHSA-2026:60025
access.redhat.com/errata/rhsa-2026:59... WEB
https://access.redhat.com/errata/RHSA-2026:59593
access.redhat.com/errata/rhsa-2026:59... WEB
https://access.redhat.com/errata/RHSA-2026:59579
access.redhat.com/errata/rhsa-2026:59... WEB
https://access.redhat.com/errata/RHSA-2026:59559
access.redhat.com/errata/rhsa-2026:59... WEB
https://access.redhat.com/errata/RHSA-2026:59558
access.redhat.com/errata/rhsa-2026:42... WEB
https://access.redhat.com/errata/RHSA-2026:42080
access.redhat.com/errata/rhsa-2026:42... WEB
https://access.redhat.com/errata/RHSA-2026:42079
access.redhat.com/errata/rhsa-2026:42... WEB
https://access.redhat.com/errata/RHSA-2026:42051
access.redhat.com/errata/rhsa-2026:42... WEB
https://access.redhat.com/errata/RHSA-2026:42050
access.redhat.com/errata/rhsa-2026:42... WEB
https://access.redhat.com/errata/RHSA-2026:42049
access.redhat.com/errata/rhsa-2026:42... WEB
https://access.redhat.com/errata/RHSA-2026:42047
access.redhat.com/errata/rhsa-2026:42... WEB
https://access.redhat.com/errata/RHSA-2026:42043
access.redhat.com/errata/rhsa-2026:41... WEB
https://access.redhat.com/errata/RHSA-2026:41930
access.redhat.com/errata/rhsa-2026:41... WEB
https://access.redhat.com/errata/RHSA-2026:41036
access.redhat.com/errata/rhsa-2026:41... WEB
https://access.redhat.com/errata/RHSA-2026:41030
access.redhat.com/errata/rhsa-2026:39... WEB
https://access.redhat.com/errata/RHSA-2026:39879
access.redhat.com/errata/rhsa-2026:39... WEB
https://access.redhat.com/errata/RHSA-2026:39573
access.redhat.com/errata/rhsa-2026:39... WEB
https://access.redhat.com/errata/RHSA-2026:39005
access.redhat.com/errata/rhsa-2026:38... WEB
https://access.redhat.com/errata/RHSA-2026:38995
access.redhat.com/errata/rhsa-2026:36... WEB
https://access.redhat.com/errata/RHSA-2026:36797
access.redhat.com/errata/rhsa-2026:36... WEB
https://access.redhat.com/errata/RHSA-2026:36648
access.redhat.com/errata/rhsa-2026:36... WEB
https://access.redhat.com/errata/RHSA-2026:36317
access.redhat.com/errata/rhsa-2026:35... WEB
https://access.redhat.com/errata/RHSA-2026:35832
access.redhat.com/errata/rhsa-2026:34... WEB
https://access.redhat.com/errata/RHSA-2026:34359
access.redhat.com/errata/rhsa-2026:34... WEB
https://access.redhat.com/errata/RHSA-2026:34357
access.redhat.com/errata/rhsa-2026:33... WEB
https://access.redhat.com/errata/RHSA-2026:33574
access.redhat.com/errata/rhsa-2026:29... WEB
https://access.redhat.com/errata/RHSA-2026:29981
access.redhat.com/errata/rhsa-2026:29... WEB
https://access.redhat.com/errata/RHSA-2026:29980
access.redhat.com/errata/rhsa-2026:23... WEB
https://access.redhat.com/errata/RHSA-2026:23264
access.redhat.com/errata/rhsa-2026:23... WEB
https://access.redhat.com/errata/RHSA-2026:23262
access.redhat.com/errata/rhsa-2026:51... WEB
https://access.redhat.com/errata/RHSA-2026:51187
access.redhat.com/errata/rhsa-2026:51... WEB
https://access.redhat.com/errata/RHSA-2026:51057
access.redhat.com/errata/rhsa-2026:50... WEB
https://access.redhat.com/errata/RHSA-2026:50319
access.redhat.com/errata/rhsa-2026:50... WEB
https://access.redhat.com/errata/RHSA-2026:50205
access.redhat.com/errata/rhsa-2026:49... WEB
https://access.redhat.com/errata/RHSA-2026:49770
access.redhat.com/errata/rhsa-2026:49... WEB
https://access.redhat.com/errata/RHSA-2026:49765
access.redhat.com/errata/rhsa-2026:49... WEB
https://access.redhat.com/errata/RHSA-2026:49744
access.redhat.com/errata/rhsa-2026:49... WEB
https://access.redhat.com/errata/RHSA-2026:49729
access.redhat.com/errata/rhsa-2026:49... WEB
https://access.redhat.com/errata/RHSA-2026:49712
access.redhat.com/errata/rhsa-2026:49... WEB
https://access.redhat.com/errata/RHSA-2026:49705
access.redhat.com/errata/rhsa-2026:49... WEB
https://access.redhat.com/errata/RHSA-2026:49703
access.redhat.com/errata/rhsa-2026:49... WEB
https://access.redhat.com/errata/RHSA-2026:49702
access.redhat.com/errata/rhsa-2026:47... WEB
https://access.redhat.com/errata/RHSA-2026:47737
access.redhat.com/errata/rhsa-2026:47... WEB
https://access.redhat.com/errata/RHSA-2026:47735
access.redhat.com/errata/rhsa-2026:47... WEB
https://access.redhat.com/errata/RHSA-2026:47149
access.redhat.com/errata/rhsa-2026:46... WEB
https://access.redhat.com/errata/RHSA-2026:46395
access.redhat.com/errata/rhsa-2026:46... WEB
https://access.redhat.com/errata/RHSA-2026:46394
access.redhat.com/errata/rhsa-2026:44... WEB
https://access.redhat.com/errata/RHSA-2026:44622
access.redhat.com/errata/rhsa-2026:42... WEB
https://access.redhat.com/errata/RHSA-2026:42946
access.redhat.com/errata/rhsa-2026:42... WEB
https://access.redhat.com/errata/RHSA-2026:42644
access.redhat.com/errata/rhsa-2026:42... WEB
https://access.redhat.com/errata/RHSA-2026:42240
access.redhat.com/errata/rhsa-2026:42... WEB
https://access.redhat.com/errata/RHSA-2026:42151
access.redhat.com/errata/rhsa-2026:42... WEB
https://access.redhat.com/errata/RHSA-2026:42150
access.redhat.com/errata/rhsa-2026:42... WEB
https://access.redhat.com/errata/RHSA-2026:42142
access.redhat.com/errata/rhsa-2026:42... WEB
https://access.redhat.com/errata/RHSA-2026:42082

Frequently Asked Questions

What is CVE-2026-27145?
CVE-2026-27145 is a security vulnerability in Software classified as a security vulnerability vulnerability under CWE-606: Unchecked Input for Loop Condition.
Which Software versions are affected?
Affected versions include releases prior to current release patches.
What version fixes CVE-2026-27145?
Upgrading to current release patches (or the latest patched release for your respective branch) resolves the vulnerability.
What is the CVSS score of CVE-2026-27145?
CVE-2026-27145 has a CVSS v3.1 base score of 6.5 (MODERATE) with vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H.
What CWE is associated with CVE-2026-27145?
CVE-2026-27145 is classified under CWE-606: Unchecked Input for Loop Condition (The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.).
How can I check Maven dependencies for CVE-2026-27145?
Run the dependency tree command: 'mvn dependency:tree'. This command lists direct and transitive dependencies in your build configuration so you can verify if a vulnerable version is resolved.
Machine-readable OSV JSON OSV v1.5 Schema
Normalized schema output
View Raw JSON 
{
  "schema_version" : "1.4.0",
  "id" : "GHSA-4279-q6mj-392r",
  "modified" : "2026-09-17T12:31:59Z",
  "published" : "2026-06-03T00:30:26Z",
  "aliases" : [ "CVE-2026-27145" ],
  "details" : "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.",
  "severity" : [ {
    "type" : "CVSS_V3",
    "score" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H"
  } ],
  "affected" : [ ],
  "references" : [ {
    "type" : "ADVISORY",
    "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:59557"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:59556"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:57649"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:57488"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:57482"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:57194"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:55899"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:54757"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:54603"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:54531"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:54525"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:54500"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:54441"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:54435"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:54432"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:54427"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:54401"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:54168"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:53530"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:53416"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:53415"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:53413"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:53412"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:53374"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:52946"
  }, {
    "type" : "WEB",
    "url" : "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json"
  }, {
    "type" : "WEB",
    "url" : "https://pkg.go.dev/vuln/GO-2026-5037"
  }, {
    "type" : "WEB",
    "url" : "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
  }, {
    "type" : "WEB",
    "url" : "https://go.dev/issue/79694"
  }, {
    "type" : "WEB",
    "url" : "https://go.dev/cl/783621"
  }, {
    "type" : "WEB",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/security/cve/CVE-2026-27145"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:68335"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:68334"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:66022"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:63016"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:61314"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:61253"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:60391"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:60390"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:60388"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:60387"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:60386"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:60354"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:60315"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:60025"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:59593"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:59579"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:59559"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:59558"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:42080"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:42079"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:42051"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:42050"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:42049"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:42047"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:42043"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:41930"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:41036"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:41030"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:39879"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:39573"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:39005"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:38995"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:36797"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:36648"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:36317"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:35832"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:34359"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:34357"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:33574"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:29981"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:29980"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:23264"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:23262"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:51187"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:51057"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:50319"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:50205"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:49770"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:49765"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:49744"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:49729"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:49712"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:49705"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:49703"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:49702"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:47737"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:47735"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:47149"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:46395"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:46394"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:44622"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:42946"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:42644"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:42240"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:42151"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:42150"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:42142"
  }, {
    "type" : "WEB",
    "url" : "https://access.redhat.com/errata/RHSA-2026:42082"
  } ],
  "database_specific" : {
    "cwe_ids" : [ "CWE-606" ],
    "severity" : "MODERATE",
    "github_reviewed" : false,
    "github_reviewed_at" : null,
    "nvd_published_at" : "2026-06-02T23:16:35Z"
  }
}