{"schema":"vulnpedia.research/1","cve":"CVE-2026-110095","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/fastify/fast-uri/security/advisories/GHSA-xhq7-xmqj-769h","tags":["WEB","vendor-reference"],"source":"mitre","sourceId":"openjs","modified":"2026-10-20T06:56:56.456Z","origins":[{"source":"mitre","sourceId":"openjs","modified":"2026-10-20T06:56:56.456Z","url":"https://github.com/fastify/fast-uri/security/advisories/GHSA-xhq7-xmqj-769h"},{"source":"nvd","sourceId":"CVE-2026-110095","modified":"2026-10-20T20:06:37.150","url":"https://github.com/fastify/fast-uri/security/advisories/GHSA-xhq7-xmqj-769h"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://github.com/fastify/fast-uri/security/advisories/GHSA-xhq7-xmqj-769h"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://github.com/fastify/fast-uri/security/advisories/GHSA-xhq7-xmqj-769h"},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://github.com/fastify/fast-uri/security/advisories/GHSA-xhq7-xmqj-769h"}]},{"url":"https://cna.openjsf.org/security-advisories.html","tags":["WEB","vendor-reference"],"source":"mitre","sourceId":"openjs","modified":"2026-10-20T06:56:56.456Z","origins":[{"source":"mitre","sourceId":"openjs","modified":"2026-10-20T06:56:56.456Z","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"nvd","sourceId":"CVE-2026-110095","modified":"2026-10-20T20:06:37.150","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://cna.openjsf.org/security-advisories.html"}]},{"url":"https://osv.dev/vulnerability/GHSA-xhq7-xmqj-769h","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","origins":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://osv.dev/vulnerability/GHSA-xhq7-xmqj-769h"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://osv.dev/vulnerability/GHSA-xhq7-xmqj-769h"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110095","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","origins":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110095"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110095"},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110095"}]},{"url":"https://github.com/fastify/fast-uri/commit/048bbd0a252971be86d6579f0dfc87f8de5b9c47","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","origins":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://github.com/fastify/fast-uri/commit/048bbd0a252971be86d6579f0dfc87f8de5b9c47"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://github.com/fastify/fast-uri/commit/048bbd0a252971be86d6579f0dfc87f8de5b9c47"}]},{"url":"https://github.com/fastify/fast-uri/commit/52774a5c35df36b0bbe439cd4c12c3dc0e50e3b9","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","origins":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://github.com/fastify/fast-uri/commit/52774a5c35df36b0bbe439cd4c12c3dc0e50e3b9"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://github.com/fastify/fast-uri/commit/52774a5c35df36b0bbe439cd4c12c3dc0e50e3b9"}]},{"url":"https://github.com/fastify/fast-uri/commit/7c19f8b97ec51f1f20b4e3d9d5820cb8d5176058","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","origins":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://github.com/fastify/fast-uri/commit/7c19f8b97ec51f1f20b4e3d9d5820cb8d5176058"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://github.com/fastify/fast-uri/commit/7c19f8b97ec51f1f20b4e3d9d5820cb8d5176058"}]},{"url":"https://github.com/fastify/fast-uri/commit/9eb8759a9825c046f57f7f695f1944bc39b88abd","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","origins":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://github.com/fastify/fast-uri/commit/9eb8759a9825c046f57f7f695f1944bc39b88abd"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://github.com/fastify/fast-uri/commit/9eb8759a9825c046f57f7f695f1944bc39b88abd"}]},{"url":"https://github.com/fastify/fast-uri/commit/acc5c5d60c4209571789496e1732468911c7e12a","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","origins":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://github.com/fastify/fast-uri/commit/acc5c5d60c4209571789496e1732468911c7e12a"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://github.com/fastify/fast-uri/commit/acc5c5d60c4209571789496e1732468911c7e12a"}]},{"url":"https://github.com/fastify/fast-uri/commit/b110a3571c37dfcf9d1c72ce2e2e178c78d1a424","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","origins":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://github.com/fastify/fast-uri/commit/b110a3571c37dfcf9d1c72ce2e2e178c78d1a424"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://github.com/fastify/fast-uri/commit/b110a3571c37dfcf9d1c72ce2e2e178c78d1a424"}]},{"url":"https://github.com/fastify/fast-uri","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","origins":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://github.com/fastify/fast-uri"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://github.com/fastify/fast-uri"}]},{"url":"https://github.com/fastify/fast-uri/releases/tag/v2.4.8","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","origins":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://github.com/fastify/fast-uri/releases/tag/v2.4.8"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://github.com/fastify/fast-uri/releases/tag/v2.4.8"}]},{"url":"https://github.com/fastify/fast-uri/releases/tag/v3.1.9","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","origins":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://github.com/fastify/fast-uri/releases/tag/v3.1.9"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://github.com/fastify/fast-uri/releases/tag/v3.1.9"}]},{"url":"https://github.com/fastify/fast-uri/releases/tag/v4.2.3","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","origins":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://github.com/fastify/fast-uri/releases/tag/v4.2.3"},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://github.com/fastify/fast-uri/releases/tag/v4.2.3"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-110095","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-110095"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556002","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556002"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-110095","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-110095"}]},{"source":"euvd","sourceId":"EUVD-2026-104812","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104812","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-104812","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104812"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://osv.dev/vulnerability/GHSA-xhq7-xmqj-769h","ecosystem":"npm","name":"fast-uri","purl":"pkg:npm/fast-uri","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.8"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-xhq7-xmqj-769h/GHSA-xhq7-xmqj-769h.json"},"modified":"2026-10-23T21:45:04.902389903Z","origins":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://osv.dev/vulnerability/GHSA-xhq7-xmqj-769h"}]},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://osv.dev/vulnerability/GHSA-xhq7-xmqj-769h","ecosystem":"npm","name":"fast-uri","purl":"pkg:npm/fast-uri","ranges":[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.1.9"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-xhq7-xmqj-769h/GHSA-xhq7-xmqj-769h.json"},"modified":"2026-10-23T21:45:04.902389903Z","origins":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://osv.dev/vulnerability/GHSA-xhq7-xmqj-769h"}]},{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","url":"https://osv.dev/vulnerability/GHSA-xhq7-xmqj-769h","ecosystem":"npm","name":"fast-uri","purl":"pkg:npm/fast-uri","ranges":[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"fixed":"4.2.3"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-xhq7-xmqj-769h/GHSA-xhq7-xmqj-769h.json"},"modified":"2026-10-23T21:45:04.902389903Z","origins":[{"source":"ghsa","sourceId":"GHSA-xhq7-xmqj-769h","modified":"2026-10-23T21:45:04.902389903Z","url":"https://osv.dev/vulnerability/GHSA-xhq7-xmqj-769h"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"cost_management_on_premise:costmanagement/costmanagement-ui-rhel10","product":"costmanagement/costmanagement-ui-rhel10 as a component of Cost Management On Premise","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/costmanagement-ui-rhel10@sha256:39700faac93e613fdd8139aed7b6dbb79a4d542f3f3cca6be04c4edce72eaf5d?repository_url=registry.redhat.io/costmanagement/costmanagement-ui-rhel10","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"network_observability_operator:network-observability/network-observability-console-plugin-rhel9","product":"network-observability/network-observability-console-plugin-rhel9 as a component of Network Observability Operator","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a?repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"openshift_pipelines:openshift-pipelines/pipelines-hub-ui-rhel8","product":"openshift-pipelines/pipelines-hub-ui-rhel8 as a component of OpenShift Pipelines","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/pipelines-hub-ui-rhel8@sha256:f20c772aeadcf5abf5c44a8d42b1ce03ee285aba297ba44f324a012c485b9645?repository_url=registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_amq_broker_7:amq-broker-maven-repository.zip","product":"amq-broker-maven-repository.zip as a component of Red Hat AMQ Broker 7","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:generic/amq-broker-maven-repository.zip@7.14.1.CR3","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_ansible_automation_platform_2:automation-platform-ui.src","product":"automation-platform-ui.src as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/automation-platform-ui@2.6.15-1.el9ap?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_developer_hub:rhdh/red-hat-developer-hub-backstage-plugin-orchestrator","product":"rhdh/red-hat-developer-hub-backstage-plugin-orchestrator as a component of Red Hat Developer Hub","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:3aa39a8c3b7bf33aeaae5b3f924d0a2f7625e64657ce9b5517a3a73620f142bb?repository_url=registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_developer_hub:rhdh/rhdh-hub-rhel9","product":"rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2?repository_url=registry.redhat.io/rhdh/rhdh-hub-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_edge_manager_1:rhem/flightctl-ui-ocp-rhel9","product":"rhem/flightctl-ui-ocp-rhel9 as a component of Red Hat Edge Manager 1","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/flightctl-ui-ocp-rhel9@sha256:f25989a62885c089c0f2317e9bafac8008dedd05b311a35aa63074a1f6c16377?repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_enterprise_linux_10:aspnetcore-targeting-pack-8.0","product":"aspnetcore-targeting-pack-8.0 as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/aspnetcore-targeting-pack-8.0","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_enterprise_linux_10:dotnet-runtime-8.0","product":"dotnet-runtime-8.0 as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/dotnet-runtime-8.0","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_enterprise_linux_10:dotnet-targeting-pack-8.0","product":"dotnet-targeting-pack-8.0 as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/dotnet-targeting-pack-8.0","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_enterprise_linux_10:grafana-pcp.src","product":"grafana-pcp.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/grafana-pcp?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_enterprise_linux_10:sgx-libs","product":"sgx-libs as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/sgx-libs","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_enterprise_linux_10:tdx-qgs","product":"tdx-qgs as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/tdx-qgs","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_enterprise_linux_8:dotnet-apphost-pack-8.0","product":"dotnet-apphost-pack-8.0 as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/dotnet-apphost-pack-8.0","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_enterprise_linux_8:dotnet-sdk-8.0-source-built-artifacts","product":"dotnet-sdk-8.0-source-built-artifacts as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_enterprise_linux_8:netstandard-targeting-pack-2.1","product":"netstandard-targeting-pack-2.1 as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/netstandard-targeting-pack-2.1","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_enterprise_linux_9:dotnet-host","product":"dotnet-host as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/dotnet-host","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_enterprise_linux_9:dotnet-sdk-8.0-source-built-artifacts","product":"dotnet-sdk-8.0-source-built-artifacts as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_enterprise_linux_9:linux-sgx.src","product":"linux-sgx.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/linux-sgx?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_enterprise_linux_9:sgx-pccs","product":"sgx-pccs as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/sgx-pccs","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9","product":"rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-gaudi-rhel9@sha256:e1057b59ca1be9501332abf97230855e85c7df858356be0da9dce230ea7e98e1?repository_url=registry.redhat.io/rhelai3/bootc-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-core-bff-rhel9","product":"rhoai/odh-core-bff-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-core-bff-rhel9@sha256:e683d11de1a782b2a796c99eccb5dfb3b908e721210ba87c2e06768f1fa8745d?repository_url=registry.redhat.io/rhoai/odh-core-bff-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-automl-rhel9","product":"rhoai/odh-mod-arch-automl-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-mod-arch-automl-rhel9@sha256:93239529dd6854c6b03a9ded073fa6d1f07eb7377b56bf466669ab539919e48d?repository_url=registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-mlflow-rhel9","product":"rhoai/odh-mod-arch-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-mod-arch-mlflow-rhel9@sha256:53674c7c6aa3d0e35160f4297fe15411230ebbd6d67092c8b4905e898b98e5ec?repository_url=registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_openshift_container_platform_4:openshift4/ose-monitoring-plugin-rhel9","product":"openshift4/ose-monitoring-plugin-rhel9 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ose-monitoring-plugin-rhel9@sha256:229583810adef94017fa3dd3a408b91a4eeda3b17371d790d9158ebee7d584c3?repository_url=registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_openshift_dev_spaces:devspaces/code-rhel9","product":"devspaces/code-rhel9 as a component of Red Hat OpenShift Dev Spaces","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/code-rhel9@sha256:2a80ac1e2c7f68dd5b726d49b5a660959de0036d992356bb742eb08349563dec?repository_url=registry.redhat.io/devspaces/code-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_quay_3:quay/quay-rhel9","product":"quay/quay-rhel9 as a component of Red Hat Quay 3","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:oci/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46?repository_url=registry.redhat.io/quay/quay-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_satellite_6:satellite/iop-host-inventory-frontend-rhel9","product":"satellite/iop-host-inventory-frontend-rhel9 as a component of Red Hat Satellite 6","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/iop-host-inventory-frontend-rhel9@sha256:7c39ecb6f63fa79890ec88707870eb2f665fa49de6e42eb5c41807044725933a?repository_url=registry.redhat.io/satellite/iop-host-inventory-frontend-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"self-service_automation_portal_2:ansible-automation-platform/bootc-automation-portal-rhel9","product":"ansible-automation-platform/bootc-automation-portal-rhel9 as a component of Self-service automation portal 2","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-automation-portal-rhel9@sha256:8553c734145775879bdfe2befa9f2df1c22c6d7db2f2251401c3cc517a7e0394?repository_url=registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_hardened_images:dotnet8.0.src","product":"dotnet8.0.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/dotnet8.0?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]},{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json","productId":"red_hat_hardened_images:prometheus3.13.src","product":"prometheus3.13.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/prometheus3.13@3.13.4-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110095","modified":"2026-10-22T21:29:10+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110095.json"}]}],"vendorCoverage":{"total":149,"shown":32,"omitted":117,"source":"redhat"}}