2 lines
21 KiB
JSON
2 lines
21 KiB
JSON
{"affected":[{"affectedData":[{"collectionURL":"https://repo.maven.apache.org/maven2","defaultStatus":"unaffected","packageName":"pkg://maven/org.eclipse.jetty/jetty-http","product":"Eclipse Jetty","repo":"https://github.com/jetty/jetty.project","vendor":"Eclipse Foundation","versions":[{"lessThanOrEqual":"12.1.6","status":"affected","version":"12.1.0","versionType":"semver"},{"lessThanOrEqual":"12.0.32","status":"affected","version":"12.0.0","versionType":"semver"},{"lessThanOrEqual":"11.0.28","status":"affected","version":"11.0.0","versionType":"semver"},{"lessThanOrEqual":"10.0.27","status":"affected","version":"10.0.0","versionType":"semver"},{"lessThanOrEqual":"9.4.59","status":"affected","version":"9.4.0","versionType":"semver"}]}],"source":"emo@eclipse.org"},{"affectedData":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:apache_camel_hawtio:4.4::el9"],"defaultStatus":"unaffected","packageName":"jetty-http","product":"HawtIO HawtIO 4.4.0","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:amq_broker:7.13"],"defaultStatus":"unaffected","product":"Red Hat AMQ Broker 7.13.5","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:apache_camel_spring_boot:4.18"],"defaultStatus":"unaffected","packageName":"jetty-http","product":"Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:apache_camel_quarkus:3.33"],"defaultStatus":"unaffected","packageName":"jetty-http","product":"Red Hat Build of Apache Camel 4.18 for Quarkus 3.33","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::crb"],"defaultStatus":"affected","packageName":"jmc","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.2.0-19.el9_8.2","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite_capsule:6.16::el8"],"defaultStatus":"affected","packageName":"openvox-server","product":"Red Hat Satellite 6.16 for RHEL 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.14.1-1.el8sat","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el9"],"defaultStatus":"affected","packageName":"openvox-server","product":"Red Hat Satellite 6.16 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.14.1-1.el9sat","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"],"defaultStatus":"affected","packageName":"openvox-server","product":"Red Hat Satellite 6.17 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.14.1-1.el9sat","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.18::el9","cpe:/a:redhat:satellite_capsule:6.18::el9"],"defaultStatus":"affected","packageName":"openvox-server","product":"Red Hat Satellite 6.18 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.14.1-1.el9sat","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6.19::el9","cpe:/a:redhat:satellite_capsule:6.19::el9"],"defaultStatus":"affected","packageName":"openvox-server","product":"Red Hat Satellite 6.19 for RHEL 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.14.1-1.el9sat","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ocp_tools:4.12::el8"],"defaultStatus":"affected","packageName":"ocp-tools-4/jenkins-rhel8","product":"OpenShift Developer Tools and Services 4.12","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786628667","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ocp_tools:4.13::el8"],"defaultStatus":"affected","packageName":"ocp-tools-4/jenkins-rhel8","product":"OpenShift Developer Tools and Services 4.13","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786628681","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ocp_tools:4.14::el8"],"defaultStatus":"affected","packageName":"ocp-tools-4/jenkins-rhel8","product":"OpenShift Developer Tools and Services 4.14","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786533561","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ocp_tools:4.15::el8"],"defaultStatus":"affected","packageName":"ocp-tools-4/jenkins-rhel8","product":"OpenShift Developer Tools and Services 4.15","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786533565","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ocp_tools:4.16::el9"],"defaultStatus":"affected","packageName":"ocp-tools-4/jenkins-rhel9","product":"OpenShift Developer Tools and Services 4.16","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787125166","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ocp_tools:4.17::el9"],"defaultStatus":"affected","packageName":"ocp-tools-4/jenkins-rhel9","product":"OpenShift Developer Tools and Services 4.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787124635","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ocp_tools:4.18::el9"],"defaultStatus":"affected","packageName":"ocp-tools-4/jenkins-rhel9","product":"OpenShift Developer Tools and Services 4.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787125069","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ocp_tools:4.19::el9"],"defaultStatus":"affected","packageName":"ocp-tools-4/jenkins-rhel9","product":"OpenShift Developer Tools and Services 4.19","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787124632","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ocp_tools:4.20::el9"],"defaultStatus":"affected","packageName":"ocp-tools-4/jenkins-rhel9","product":"OpenShift Developer Tools and Services 4.20","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787124925","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ocp_tools:4.21::el9"],"defaultStatus":"affected","packageName":"ocp-tools-4/jenkins-rhel9","product":"OpenShift Developer Tools and Services 4.21","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787125311","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ocp_tools:4.22::el9"],"defaultStatus":"affected","packageName":"ocp-tools-4/jenkins-rhel9","product":"OpenShift Developer Tools and Services 4.22","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787124779","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:offline_knowledge_portal:1.2::el9"],"defaultStatus":"affected","packageName":"offline-knowledge-portal/rhokp-rhel9","product":"Red Hat Offline Knowledge Portal 1.2.12","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1779996999","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_devspaces:3.27::el9"],"defaultStatus":"affected","packageName":"devspaces/openvsx-rhel9","product":"Red Hat OpenShift Dev Spaces 3.27","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1776716842","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_devspaces:3.27::el9"],"defaultStatus":"affected","packageName":"devspaces/pluginregistry-rhel9","product":"Red Hat OpenShift Dev Spaces 3.27","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1776717247","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ocp_tools"],"defaultStatus":"affected","packageName":"jenkins","product":"OpenShift Developer Tools and Services","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:amq_broker:7"],"defaultStatus":"affected","packageName":"jetty-http","product":"Red Hat AMQ Broker 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:camel_quarkus:3"],"defaultStatus":"affected","packageName":"jetty-http","product":"Red Hat build of Apache Camel 4 for Quarkus 3","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:service_registry:2"],"defaultStatus":"unaffected","packageName":"jetty-http","product":"Red Hat build of Apicurio Registry 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:apicurio_registry:3"],"defaultStatus":"unaffected","packageName":"jetty-http","product":"Red Hat build of Apicurio Registry 3","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:debezium:2"],"defaultStatus":"unknown","packageName":"jetty-http","product":"Red Hat build of Debezium 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:debezium:3"],"defaultStatus":"affected","packageName":"jetty-http","product":"Red Hat build of Debezium 3","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:jboss_data_grid:8"],"defaultStatus":"unaffected","packageName":"jetty-http","product":"Red Hat Data Grid 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:jboss_fuse:7"],"defaultStatus":"affected","packageName":"jetty-http","product":"Red Hat Fuse 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7"],"defaultStatus":"unaffected","packageName":"jetty-http","product":"Red Hat JBoss Enterprise Application Platform 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8"],"defaultStatus":"unaffected","packageName":"jetty-http","product":"Red Hat JBoss Enterprise Application Platform 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:jbosseapxp"],"defaultStatus":"unaffected","packageName":"jetty-http","product":"Red Hat JBoss Enterprise Application Platform Expansion Pack","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:jboss_enterprise_web_server:6"],"defaultStatus":"affected","packageName":"jetty-http","product":"Red Hat JBoss Web Server 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:jboss_enterprise_bpms_platform:7"],"defaultStatus":"unaffected","packageName":"jetty-http","product":"Red Hat Process Automation 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6"],"defaultStatus":"affected","packageName":"puppetserver","product":"Red Hat Satellite 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:satellite:6"],"defaultStatus":"affected","packageName":"satellite-capsule:el8/puppetserver","product":"Red Hat Satellite 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_single_sign_on:7"],"defaultStatus":"affected","packageName":"jetty-http","product":"Red Hat Single Sign-On 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:amq_streams:2"],"defaultStatus":"affected","packageName":"jetty-http","product":"streams for Apache Kafka 2","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:amq_streams:3"],"defaultStatus":"affected","packageName":"jetty-http","product":"streams for Apache Kafka 3","vendor":"Red Hat"}],"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*","matchCriteriaId":"E0FB149B-EF33-4A51-9B96-030899E250CC","versionEndExcluding":"9.4.60","versionStartIncluding":"9.4.0","vulnerable":true},{"criteria":"cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*","matchCriteriaId":"361D419A-7A89-439A-99B1-D34E9914BAE8","versionEndExcluding":"10.0.28","versionStartIncluding":"10.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*","matchCriteriaId":"7020D8E5-61DD-4DB6-82E4-EA46A96838A9","versionEndExcluding":"11.0.28","versionStartIncluding":"11.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*","matchCriteriaId":"E1A6095F-3D1E-40CB-A875-D41BF6C73EB3","versionEndExcluding":"12.0.33","versionStartIncluding":"12.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*","matchCriteriaId":"B5A32954-7B03-46B6-9956-54BE0F8477E8","versionEndExcluding":"12.1.7","versionStartIncluding":"12.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the \"funky chunks\" techniques outlined here:\n * https://w4ke.info/2025/06/18/funky-chunks.html\n\n * https://w4ke.info/2025/10/29/funky-chunks-2.html\n\n\nJetty terminates chunk extension parsing at \\r\\n inside quoted strings instead of treating this as an error.\n\n\n\n\nPOST / HTTP/1.1\nHost: localhost\nTransfer-Encoding: chunked\n\n1;ext=\"val\nX\n0\n\nGET /smuggled HTTP/1.1\n...\n\n\n\n\n\nNote how the chunk extension does not close the double quotes, and it is able to inject a smuggled request."},{"lang":"es","value":"En Eclipse Jetty, el analizador HTTP/1.1 es vulnerable al contrabando de solicitudes cuando se utilizan extensiones de fragmento, de forma similar a las técnicas de ’funky chunks’ descritas aquí:\n * https://w4ke.info/2025/06/18/funky-chunks.html\n\n * https://w4ke.info/2025/10/29/funky-chunks-2.html\n\n\nJetty termina el análisis de la extensión de fragmento en \\r\\n dentro de cadenas entrecomilladas en lugar de tratar esto como un error.\n\n\nPOST / HTTP/1.1\nHost: localhost\nTransfer-Encoding: chunked\n\n1;ext=”val\nX\n0\n\nGET /smuggled HTTP/1.1\n...\n\n\nObserve cómo la extensión de fragmento no cierra las comillas dobles y es capaz de inyectar una solicitud de contrabando."}],"id":"CVE-2026-2332","lastModified":"2026-10-26T21:10:00.170","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.2,"source":"emo@eclipse.org","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"},{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.2,"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-2332","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-04-14T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-04-14T12:16:21.333","references":[{"source":"emo@eclipse.org","tags":["Exploit","Mitigation","Vendor Advisory"],"url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-355h-qmc2-wpwf"},{"source":"emo@eclipse.org","tags":["Issue Tracking","Vendor Advisory"],"url":"https://gitlab.eclipse.org/security/cve-assignment/-/issues/89"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:10175"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:14272"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:17668"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:20568"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:21773"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:22453"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:25089"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:50221"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:50222"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:50223"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:50263"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:60239"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:60246"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:60247"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:60248"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:60249"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:60250"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:60251"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:60252"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:60254"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:60256"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/errata/RHSA-2026:60259"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://access.redhat.com/security/cve/CVE-2026-2332"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458187"},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2332.json"}],"sourceIdentifier":"emo@eclipse.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-444"}],"source":"emo@eclipse.org","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-444"}],"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","type":"Secondary"}]}
|