{"schema":"vulnpedia.research/1","cve":"CVE-2026-109855","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/nodejs/undici/security/advisories/GHSA-qq8j-7v2v-3rwp","tags":["Mitigation","Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"openjs","modified":"2026-10-15T08:12:51.245Z","origins":[{"source":"mitre","sourceId":"openjs","modified":"2026-10-15T08:12:51.245Z","url":"https://github.com/nodejs/undici/security/advisories/GHSA-qq8j-7v2v-3rwp"},{"source":"nvd","sourceId":"CVE-2026-109855","modified":"2026-10-19T20:46:49.400","url":"https://github.com/nodejs/undici/security/advisories/GHSA-qq8j-7v2v-3rwp"},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://github.com/nodejs/undici/security/advisories/GHSA-qq8j-7v2v-3rwp"}]},{"url":"https://cna.openjsf.org/security-advisories.html","tags":["Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"openjs","modified":"2026-10-15T08:12:51.245Z","origins":[{"source":"mitre","sourceId":"openjs","modified":"2026-10-15T08:12:51.245Z","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"nvd","sourceId":"CVE-2026-109855","modified":"2026-10-19T20:46:49.400","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://cna.openjsf.org/security-advisories.html"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109855","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-109855"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553103","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553103"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-109855","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-109855"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109855","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109855"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:76677","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:76677"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:83198","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://access.redhat.com/errata/RHSA-2026:83198"}]},{"source":"euvd","sourceId":"EUVD-2026-101959","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101959","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-101959","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101959"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"Red Hat Hardened Images:grafana12.4-0:12.4.12-0.4.hum1@aarch64","product":"grafana12.4-0:12.4.12-0.4.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:76677"}],"purl":"pkg:rpm/redhat/grafana12.4@12.4.12-0.4.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"Red Hat Hardened Images:grafana12.4-0:12.4.12-0.4.hum1@x86_64","product":"grafana12.4-0:12.4.12-0.4.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:76677"}],"purl":"pkg:rpm/redhat/grafana12.4@12.4.12-0.4.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"Red Hat Hardened Images:nodejs26-0:26.11.1-0.3.hum1@src","product":"nodejs26-0:26.11.1-0.3.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83198"}],"purl":"pkg:rpm/redhat/nodejs26@26.11.1-0.3.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"Red Hat Hardened Images:nodejs26-bin-0:26.11.1-0.3.hum1@noarch@public-hummingbird-aarch64-rpms","product":"nodejs26-bin-0:26.11.1-0.3.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83198"}],"purl":"pkg:rpm/redhat/nodejs26-bin@26.11.1-0.3.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"Red Hat Hardened Images:nodejs26-devel-0:26.11.1-0.3.hum1@aarch64","product":"nodejs26-devel-0:26.11.1-0.3.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83198"}],"purl":"pkg:rpm/redhat/nodejs26-devel@26.11.1-0.3.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"Red Hat Hardened Images:nodejs26-devel-0:26.11.1-0.3.hum1@x86_64","product":"nodejs26-devel-0:26.11.1-0.3.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83198"}],"purl":"pkg:rpm/redhat/nodejs26-devel@26.11.1-0.3.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"Red Hat Hardened Images:nodejs26-docs-0:26.11.1-0.3.hum1@noarch@public-hummingbird-x86_64-rpms","product":"nodejs26-docs-0:26.11.1-0.3.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83198"}],"purl":"pkg:rpm/redhat/nodejs26-docs@26.11.1-0.3.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"Red Hat Hardened Images:nodejs26-full-i18n-0:26.11.1-0.3.hum1@s390x","product":"nodejs26-full-i18n-0:26.11.1-0.3.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83198"}],"purl":"pkg:rpm/redhat/nodejs26-full-i18n@26.11.1-0.3.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"Red Hat Hardened Images:nodejs26-libs-0:26.11.1-0.3.hum1@s390x","product":"nodejs26-libs-0:26.11.1-0.3.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83198"}],"purl":"pkg:rpm/redhat/nodejs26-libs@26.11.1-0.3.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"Red Hat Hardened Images:nodejs26-npm-0:11.20.0-1.26.11.1.0.3.hum1@noarch@public-hummingbird-aarch64-rpms","product":"nodejs26-npm-0:11.20.0-1.26.11.1.0.3.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83198"}],"purl":"pkg:rpm/redhat/nodejs26-npm@11.20.0-1.26.11.1.0.3.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"Red Hat Hardened Images:nodejs26-npm-bin-0:26.11.1-0.3.hum1@noarch@public-hummingbird-aarch64-rpms","product":"nodejs26-npm-bin-0:26.11.1-0.3.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83198"}],"purl":"pkg:rpm/redhat/nodejs26-npm-bin@26.11.1-0.3.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"Red Hat Hardened Images:nodejs26-npm-bin-0:26.11.1-0.3.hum1@noarch@public-hummingbird-x86_64-rpms","product":"nodejs26-npm-bin-0:26.11.1-0.3.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:83198"}],"purl":"pkg:rpm/redhat/nodejs26-npm-bin@26.11.1-0.3.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"exploit_intelligence:exploit-intelligence/vulnerability-analysis-rhel9","product":"exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vulnerability-analysis-rhel9@sha256:9e846f56a5aeee9b65fbfee6dd2825113db854aef8dd0d5806df93fdcf2622e7?repository_url=registry.redhat.io/exploit-intelligence/vulnerability-analysis-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_amq_broker_7:amq-broker-maven-repository.zip","product":"amq-broker-maven-repository.zip as a component of Red Hat AMQ Broker 7","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:generic/amq-broker-maven-repository.zip@7.14.1.CR3","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_hardened_images:nodejs25.src","product":"nodejs25.src as a component of Red Hat Hardened Images","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/nodejs25@25.9.0-1.7.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9","product":"rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-mlflow-rhel9@sha256:26ac33d2d07f9d51df725604ca695c98597f9bf428f6038bb1d74f9405e8db2d?repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_openshift_data_foundation_4:odf4/ocs-client-console-rhel9","product":"odf4/ocs-client-console-rhel9 as a component of Red Hat Openshift Data Foundation 4","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/ocs-client-console-rhel9@sha256:7216ce2d92ad684f986c32dced35244e963be67154053b1969a05c93fbd9e966?repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_openshift_data_foundation_4:odf4/odf-multicluster-console-rhel9","product":"odf4/odf-multicluster-console-rhel9 as a component of Red Hat Openshift Data Foundation 4","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odf-multicluster-console-rhel9@sha256:6fbfe726dc737df7aff1b7bfd59091f2bc56075b238a40b8ad94343131c49203?repository_url=registry.redhat.io/odf4/odf-multicluster-console-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_openshift_dev_spaces:devspaces/dashboard-rhel9","product":"devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/dashboard-rhel9@sha256:1cef563af30567f7aba3baeb6fa94494f93ac07350a23fabaa67d079f780f640?repository_url=registry.redhat.io/devspaces/dashboard-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_trusted_artifact_signer:rhtas/rhtas-console-ui-rhel9","product":"rhtas/rhtas-console-ui-rhel9 as a component of Red Hat Trusted Artifact Signer","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/rhtas-console-ui-rhel9@sha256:2a0ead6c4378367d5feceea5d494e5565d52738aebd136d35a0e2ae80e7afb14?repository_url=registry.redhat.io/rhtas/rhtas-console-ui-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"secrets_management_console_for_red_hat_openshift:external-secrets-management/console-plugin-rhel9","product":"external-secrets-management/console-plugin-rhel9 as a component of Secrets Management Console for Red Hat OpenShift","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/console-plugin-rhel9@sha256:3ab2dda876e60016c9eddacdf05f501c0a2f66a7a61bef5d33474d5fe8ba7d40?repository_url=registry.redhat.io/external-secrets-management/console-plugin-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"Red Hat Hardened Images:v8-14.6-devel-0:14.6.202.34-1.26.11.1.0.3.hum1@aarch64","product":"v8-14.6-devel-0:14.6.202.34-1.26.11.1.0.3.hum1@aarch64 as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/v8-14.6-devel@14.6.202.34-1.26.11.1.0.3.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_developer_hub:rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator","product":"rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator as a component of Red Hat Developer Hub","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:924c4e5e8642438f3099272ff7edd746a66fcec4779aeafb9fd6b3ae0c594f72?repository_url=registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_enterprise_linux_10:nodejs-npm","product":"nodejs-npm as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-npm","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_enterprise_linux_8:nodejs-devel::nodejs:22","product":"nodejs-devel (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-devel?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_enterprise_linux_8:nodejs-nodemon::nodejs:22","product":"nodejs-nodemon (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-nodemon?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_enterprise_linux_8:nodejs::nodejs:22","product":"nodejs (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_enterprise_linux_9:nodejs-docs::nodejs:26","product":"nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-docs?rpmmod=nodejs:26","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_enterprise_linux_9:nodejs::nodejs:22","product":"nodejs (nodejs:22) as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-agent-ops-rhel9","product":"rhoai/odh-mod-arch-agent-ops-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-mod-arch-agent-ops-rhel9@sha256:bf5e5b308f9f167fe21c2ac0f8f7dd65af47bbd7d0c3396b66fbe62620d853b4?repository_url=registry.redhat.io/rhoai/odh-mod-arch-agent-ops-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"red_hat_openshift_container_platform_4:wasmedge","product":"wasmedge as a component of Red Hat OpenShift Container Platform 4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/wasmedge","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]},{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json","productId":"self-service_automation_portal_2:ansible-automation-platform/bootc-automation-portal-rhel9","product":"ansible-automation-platform/bootc-automation-portal-rhel9 as a component of Self-service automation portal 2","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/bootc-automation-portal-rhel9@sha256:8553c734145775879bdfe2befa9f2df1c22c6d7db2f2251401c3cc517a7e0394?repository_url=registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109855","modified":"2026-10-20T06:08:44+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109855.json"}]}],"vendorCoverage":{"total":138,"shown":32,"omitted":106,"source":"redhat"}}