{"schema":"vulnpedia.research/1","cve":"CVE-2026-106451","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/yawkat/lz4-java/security/advisories/GHSA-mcr4-qmvw-px4g","tags":["x_refsource_CONFIRM","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T19:50:41.915Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T19:50:41.915Z","url":"https://github.com/yawkat/lz4-java/security/advisories/GHSA-mcr4-qmvw-px4g"},{"source":"nvd","sourceId":"CVE-2026-106451","modified":"2026-10-07T19:17:32.463","url":"https://github.com/yawkat/lz4-java/security/advisories/GHSA-mcr4-qmvw-px4g"},{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","url":"https://github.com/yawkat/lz4-java/security/advisories/GHSA-mcr4-qmvw-px4g"},{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","modified":"2026-10-07T20:45:06.908713391Z","url":"https://github.com/yawkat/lz4-java/security/advisories/GHSA-mcr4-qmvw-px4g"},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://github.com/yawkat/lz4-java/security/advisories/GHSA-mcr4-qmvw-px4g"}]},{"url":"https://github.com/yawkat/lz4-java/commit/7a48b7f6b8099b9dab6541e4ac2ee0979dc55aa3","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T19:50:41.915Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T19:50:41.915Z","url":"https://github.com/yawkat/lz4-java/commit/7a48b7f6b8099b9dab6541e4ac2ee0979dc55aa3"},{"source":"nvd","sourceId":"CVE-2026-106451","modified":"2026-10-07T19:17:32.463","url":"https://github.com/yawkat/lz4-java/commit/7a48b7f6b8099b9dab6541e4ac2ee0979dc55aa3"},{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","url":"https://github.com/yawkat/lz4-java/commit/7a48b7f6b8099b9dab6541e4ac2ee0979dc55aa3"},{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","modified":"2026-10-07T20:45:06.908713391Z","url":"https://github.com/yawkat/lz4-java/commit/7a48b7f6b8099b9dab6541e4ac2ee0979dc55aa3"},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://github.com/yawkat/lz4-java/commit/7a48b7f6b8099b9dab6541e4ac2ee0979dc55aa3"}]},{"url":"https://github.com/yawkat/lz4-java/releases/tag/v1.11.4","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T19:50:41.915Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T19:50:41.915Z","url":"https://github.com/yawkat/lz4-java/releases/tag/v1.11.4"},{"source":"nvd","sourceId":"CVE-2026-106451","modified":"2026-10-07T19:17:32.463","url":"https://github.com/yawkat/lz4-java/releases/tag/v1.11.4"},{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","url":"https://github.com/yawkat/lz4-java/releases/tag/v1.11.4"},{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","modified":"2026-10-07T20:45:06.908713391Z","url":"https://github.com/yawkat/lz4-java/releases/tag/v1.11.4"},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://github.com/yawkat/lz4-java/releases/tag/v1.11.4"}]},{"url":"https://osv.dev/vulnerability/GHSA-mcr4-qmvw-px4g","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","modified":"2026-10-07T20:45:06.908713391Z","origins":[{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","url":"https://osv.dev/vulnerability/GHSA-mcr4-qmvw-px4g"},{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","modified":"2026-10-07T20:45:06.908713391Z","url":"https://osv.dev/vulnerability/GHSA-mcr4-qmvw-px4g"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106451","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","modified":"2026-10-07T20:45:06.908713391Z","origins":[{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106451"},{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","modified":"2026-10-07T20:45:06.908713391Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106451"},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106451"}]},{"url":"https://github.com/yawkat/lz4-java","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","modified":"2026-10-07T20:45:06.908713391Z","origins":[{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","url":"https://github.com/yawkat/lz4-java"},{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","modified":"2026-10-07T20:45:06.908713391Z","url":"https://github.com/yawkat/lz4-java"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-106451","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-106451"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547137","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547137"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-106451","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-106451"}]},{"source":"euvd","sourceId":"EUVD-2026-93868","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93868","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-93868","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93868"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","url":"https://osv.dev/vulnerability/GHSA-mcr4-qmvw-px4g","ecosystem":"Maven","name":"at.yawk.lz4:lz4-java","purl":"pkg:maven/at.yawk.lz4/lz4-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.4"}]}],"versions":["1.10.0","1.10.1","1.10.2","1.10.3","1.10.4","1.11.0","1.11.1","1.11.2","1.11.3","1.8.1","1.9.0"],"databaseSpecific":{"last_known_affected_version_range":"<= 1.11.3","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-mcr4-qmvw-px4g/GHSA-mcr4-qmvw-px4g.json"},"modified":"2026-10-07T20:45:06.908713391Z","origins":[{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","modified":"2026-10-07T20:45:06.908713391Z","url":"https://osv.dev/vulnerability/GHSA-mcr4-qmvw-px4g"}]},{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","url":"https://osv.dev/vulnerability/GHSA-mcr4-qmvw-px4g","ecosystem":"Maven","name":"org.lz4:lz4-java","purl":"pkg:maven/org.lz4/lz4-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.0"},{"last_affected":"1.8.1"}]}],"versions":["1.7.0","1.7.1","1.8.0","1.8.1"],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-mcr4-qmvw-px4g/GHSA-mcr4-qmvw-px4g.json"},"modified":"2026-10-07T20:45:06.908713391Z","origins":[{"source":"ghsa","sourceId":"GHSA-mcr4-qmvw-px4g","modified":"2026-10-07T20:45:06.908713391Z","url":"https://osv.dev/vulnerability/GHSA-mcr4-qmvw-px4g"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"openshift_developer_tools_and_services:jenkins-2-plugins.src","product":"jenkins-2-plugins.src as a component of OpenShift Developer Tools and Services","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/jenkins-2-plugins?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel8","product":"ocp-tools-4/jenkins-rhel8 as a component of OpenShift Developer Tools and Services","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/jenkins-rhel8?repository_url=registry.redhat.io/ocp-tools-4/jenkins-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel9","product":"ocp-tools-4/jenkins-rhel9 as a component of OpenShift Developer Tools and Services","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/jenkins-rhel9?repository_url=registry.redhat.io/ocp-tools-4/jenkins-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_build_of_apache_camel_4_for_quarkus_3:lz4-java","product":"lz4-java as a component of Red Hat build of Apache Camel 4 for Quarkus 3","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:maven/at.yawk.lz4/lz4-java","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_build_of_apache_camel_for_spring_boot_4:liblz4-java.so","product":"liblz4-java.so as a component of Red Hat build of Apache Camel for Spring Boot 4","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:generic/liblz4-java.so","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_build_of_apache_camel_for_spring_boot_4:lz4-java","product":"lz4-java as a component of Red Hat build of Apache Camel for Spring Boot 4","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:maven/at.yawk.lz4/lz4-java","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_build_of_apicurio_registry_3:lz4-java","product":"lz4-java as a component of Red Hat build of Apicurio Registry 3","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:maven/at.yawk.lz4/lz4-java","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_build_of_debezium_3:lz4-java","product":"lz4-java as a component of Red Hat build of Debezium 3","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:maven/at.yawk.lz4/lz4-java","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_build_of_quarkus:lz4-java","product":"lz4-java as a component of Red Hat build of Quarkus","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Affected"}],"purl":"pkg:maven/at.yawk.lz4/lz4-java","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_enterprise_linux_8:lz4-java","product":"lz4-java as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:maven/at.yawk.lz4/lz4-java","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_enterprise_linux_8:lz4-java-javadoc","product":"lz4-java-javadoc as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/lz4-java-javadoc?rpmmod=jmc:rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_enterprise_linux_9:jmc","product":"jmc as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/jmc","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_enterprise_linux_9:jmc.src","product":"jmc.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/jmc?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_fuse_7:lz4-java","product":"lz4-java as a component of Red Hat Fuse 7","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:maven/at.yawk.lz4/lz4-java","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_hardened_images:maven3.9.src","product":"maven3.9.src as a component of Red Hat Hardened Images","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/maven3.9?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_jboss_enterprise_application_platform_8:liblz4-java.so","product":"liblz4-java.so as a component of Red Hat JBoss Enterprise Application Platform 8","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:generic/liblz4-java.so","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_jboss_enterprise_application_platform_8:lz4-java","product":"lz4-java as a component of Red Hat JBoss Enterprise Application Platform 8","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:maven/at.yawk.lz4/lz4-java","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_jboss_enterprise_application_platform_expansion_pack:liblz4-java.so","product":"liblz4-java.so as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:generic/liblz4-java.so","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_jboss_enterprise_application_platform_expansion_pack:lz4-java","product":"lz4-java as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:maven/at.yawk.lz4/lz4-java","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-spark-operator-rhel9","product":"rhoai/odh-spark-operator-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-spark-operator-rhel9@sha256:837b9d7278cac5b40b2ddd989c05e2d07566bfd6ee4454a5a6add2779fdad887?repository_url=registry.redhat.io/rhoai/odh-spark-operator-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cpu-py312-rhel9","product":"rhoai/odh-th-torch-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-th-torch-cpu-py312-rhel9@sha256:d265d1398bceb2d971d725e27e81c8def1213b2f0dc265a37707b2f4270317ca?repository_url=registry.redhat.io/rhoai/odh-th-torch-cpu-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9","product":"rhoai/odh-th-torch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-th-torch-cuda-py312-rhel9@sha256:efd7b3607b699092c68359d20ef0d0043114191a097637667c0d2cf78fbea702?repository_url=registry.redhat.io/rhoai/odh-th-torch-cuda-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9","product":"rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-th06-cpu-torch210-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9","product":"rhoai/odh-th06-cpu-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-th06-cpu-torch291-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th06-cpu-torch291-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9","product":"rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-th06-cuda130-torch210-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th06-cuda130-torch210-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9","product":"rhoai/odh-th06-cuda130-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-th06-cuda130-torch291-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th06-cuda130-torch291-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]},{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9","product":"rhoai/odh-th06-rocm64-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Configure affected Java applications to use a dedicated, private temporary directory rather than a world-writable directory such as /tmp.\n\n1. Create a directory accessible only by the service account running the Java process:\n```bash\nmkdir -p /var/run/app-private-tmp\nchmod 700 /var/run/app-private-tmp\n```\n\n2. Add the `java.io.tmpdir` system property to the application startup arguments or service environment:\n```\n-Djava.io.tmpdir=/var/run/app-private-tmp\n```\n\nCaveats:\nApplying this configuration change requires restarting the target Java application or service. Ensure that the configured directory is maintained across reboots with correct ownership and SELinux permissions."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-th06-rocm64-torch291-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th06-rocm64-torch291-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-106451","modified":"2026-10-13T11:36:32+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106451.json"}]}],"vendorCoverage":{"total":27,"shown":27,"omitted":0,"source":"redhat"}}