{"schema":"vulnpedia.research/1","cve":"CVE-2026-110306","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/fastify/fast-uri/security/advisories/GHSA-w74x-v6f9-j3xg","tags":["WEB","vendor-reference"],"source":"mitre","sourceId":"openjs","modified":"2026-10-20T07:03:47.312Z","origins":[{"source":"mitre","sourceId":"openjs","modified":"2026-10-20T07:03:47.312Z","url":"https://github.com/fastify/fast-uri/security/advisories/GHSA-w74x-v6f9-j3xg"},{"source":"nvd","sourceId":"CVE-2026-110306","modified":"2026-10-20T20:17:14.917","url":"https://github.com/fastify/fast-uri/security/advisories/GHSA-w74x-v6f9-j3xg"},{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","url":"https://github.com/fastify/fast-uri/security/advisories/GHSA-w74x-v6f9-j3xg"},{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","url":"https://github.com/fastify/fast-uri/security/advisories/GHSA-w74x-v6f9-j3xg"},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://github.com/fastify/fast-uri/security/advisories/GHSA-w74x-v6f9-j3xg"}]},{"url":"https://cna.openjsf.org/security-advisories.html","tags":["WEB","vendor-reference"],"source":"mitre","sourceId":"openjs","modified":"2026-10-20T07:03:47.312Z","origins":[{"source":"mitre","sourceId":"openjs","modified":"2026-10-20T07:03:47.312Z","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"nvd","sourceId":"CVE-2026-110306","modified":"2026-10-20T20:17:14.917","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://cna.openjsf.org/security-advisories.html"}]},{"url":"https://osv.dev/vulnerability/GHSA-w74x-v6f9-j3xg","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","origins":[{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","url":"https://osv.dev/vulnerability/GHSA-w74x-v6f9-j3xg"},{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","url":"https://osv.dev/vulnerability/GHSA-w74x-v6f9-j3xg"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110306","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","origins":[{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110306"},{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110306"},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110306"}]},{"url":"https://github.com/fastify/fast-uri/commit/39933a1f1422986f14e2d844f552238feb40f5d4","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","origins":[{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","url":"https://github.com/fastify/fast-uri/commit/39933a1f1422986f14e2d844f552238feb40f5d4"},{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","url":"https://github.com/fastify/fast-uri/commit/39933a1f1422986f14e2d844f552238feb40f5d4"}]},{"url":"https://github.com/fastify/fast-uri/commit/597f254c86d151568511eeb9a1df761fd12520b3","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","origins":[{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","url":"https://github.com/fastify/fast-uri/commit/597f254c86d151568511eeb9a1df761fd12520b3"},{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","url":"https://github.com/fastify/fast-uri/commit/597f254c86d151568511eeb9a1df761fd12520b3"}]},{"url":"https://github.com/fastify/fast-uri/commit/e60e716f41d1d73717e2d803d20b68d2c6d20a0f","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","origins":[{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","url":"https://github.com/fastify/fast-uri/commit/e60e716f41d1d73717e2d803d20b68d2c6d20a0f"},{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","url":"https://github.com/fastify/fast-uri/commit/e60e716f41d1d73717e2d803d20b68d2c6d20a0f"}]},{"url":"https://github.com/fastify/fast-uri","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","origins":[{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","url":"https://github.com/fastify/fast-uri"},{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","url":"https://github.com/fastify/fast-uri"}]},{"url":"https://github.com/fastify/fast-uri/releases/tag/v2.4.8","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","origins":[{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","url":"https://github.com/fastify/fast-uri/releases/tag/v2.4.8"},{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","url":"https://github.com/fastify/fast-uri/releases/tag/v2.4.8"}]},{"url":"https://github.com/fastify/fast-uri/releases/tag/v3.1.9","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","origins":[{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","url":"https://github.com/fastify/fast-uri/releases/tag/v3.1.9"},{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","url":"https://github.com/fastify/fast-uri/releases/tag/v3.1.9"}]},{"url":"https://github.com/fastify/fast-uri/releases/tag/v4.2.3","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","origins":[{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","url":"https://github.com/fastify/fast-uri/releases/tag/v4.2.3"},{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","url":"https://github.com/fastify/fast-uri/releases/tag/v4.2.3"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-110306","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-110306"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556005","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556005"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-110306","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-110306"}]},{"source":"euvd","sourceId":"EUVD-2026-104814","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104814","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-104814","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104814"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","url":"https://osv.dev/vulnerability/GHSA-w74x-v6f9-j3xg","ecosystem":"npm","name":"fast-uri","purl":"pkg:npm/fast-uri","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.8"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-w74x-v6f9-j3xg/GHSA-w74x-v6f9-j3xg.json"},"modified":"2026-10-23T21:45:04.896137439Z","origins":[{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","url":"https://osv.dev/vulnerability/GHSA-w74x-v6f9-j3xg"}]},{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","url":"https://osv.dev/vulnerability/GHSA-w74x-v6f9-j3xg","ecosystem":"npm","name":"fast-uri","purl":"pkg:npm/fast-uri","ranges":[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.1.9"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-w74x-v6f9-j3xg/GHSA-w74x-v6f9-j3xg.json"},"modified":"2026-10-23T21:45:04.896137439Z","origins":[{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","url":"https://osv.dev/vulnerability/GHSA-w74x-v6f9-j3xg"}]},{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","url":"https://osv.dev/vulnerability/GHSA-w74x-v6f9-j3xg","ecosystem":"npm","name":"fast-uri","purl":"pkg:npm/fast-uri","ranges":[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"fixed":"4.2.3"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-w74x-v6f9-j3xg/GHSA-w74x-v6f9-j3xg.json"},"modified":"2026-10-23T21:45:04.896137439Z","origins":[{"source":"ghsa","sourceId":"GHSA-w74x-v6f9-j3xg","modified":"2026-10-23T21:45:04.896137439Z","url":"https://osv.dev/vulnerability/GHSA-w74x-v6f9-j3xg"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"cost_management_on_premise:costmanagement/costmanagement-ui-rhel10","product":"costmanagement/costmanagement-ui-rhel10 as a component of Cost Management On Premise","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/costmanagement-ui-rhel10@sha256:39700faac93e613fdd8139aed7b6dbb79a4d542f3f3cca6be04c4edce72eaf5d?repository_url=registry.redhat.io/costmanagement/costmanagement-ui-rhel10","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"network_observability_operator:network-observability/network-observability-console-plugin-rhel9","product":"network-observability/network-observability-console-plugin-rhel9 as a component of Network Observability Operator","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/network-observability-console-plugin-rhel9@sha256:fb8fba794fda8541fdaa0f2fcfa6467068abbaa0b4d6d497bc46837bf38a750a?repository_url=registry.redhat.io/network-observability/network-observability-console-plugin-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"openshift_pipelines:openshift-pipelines/pipelines-hub-ui-rhel8","product":"openshift-pipelines/pipelines-hub-ui-rhel8 as a component of OpenShift Pipelines","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/pipelines-hub-ui-rhel8@sha256:f20c772aeadcf5abf5c44a8d42b1ce03ee285aba297ba44f324a012c485b9645?repository_url=registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_amq_broker_7:amq-broker-maven-repository.zip","product":"amq-broker-maven-repository.zip as a component of Red Hat AMQ Broker 7","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:generic/amq-broker-maven-repository.zip@7.14.1.CR3","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_ansible_automation_platform_2:automation-platform-ui.src","product":"automation-platform-ui.src as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/automation-platform-ui@2.6.15-1.el9ap?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_developer_hub:rhdh/red-hat-developer-hub-backstage-plugin-orchestrator","product":"rhdh/red-hat-developer-hub-backstage-plugin-orchestrator as a component of Red Hat Developer Hub","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:3aa39a8c3b7bf33aeaae5b3f924d0a2f7625e64657ce9b5517a3a73620f142bb?repository_url=registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_developer_hub:rhdh/rhdh-hub-rhel9","product":"rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2?repository_url=registry.redhat.io/rhdh/rhdh-hub-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_edge_manager_1:rhem/flightctl-ui-ocp-rhel9","product":"rhem/flightctl-ui-ocp-rhel9 as a component of Red Hat Edge Manager 1","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/flightctl-ui-ocp-rhel9@sha256:f25989a62885c089c0f2317e9bafac8008dedd05b311a35aa63074a1f6c16377?repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_enterprise_linux_10:cockpit-image-builder","product":"cockpit-image-builder as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/cockpit-image-builder","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_enterprise_linux_10:dotnet-runtime-dbg-8.0","product":"dotnet-runtime-dbg-8.0 as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/dotnet-runtime-dbg-8.0","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_enterprise_linux_10:dotnet-templates-8.0","product":"dotnet-templates-8.0 as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/dotnet-templates-8.0","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_enterprise_linux_10:grafana-selinux","product":"grafana-selinux as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/grafana-selinux","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_enterprise_linux_10:sgx-mpa","product":"sgx-mpa as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/sgx-mpa","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_enterprise_linux_8:aspnetcore-runtime-8.0","product":"aspnetcore-runtime-8.0 as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/aspnetcore-runtime-8.0","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_enterprise_linux_8:dotnet-host","product":"dotnet-host as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/dotnet-host","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_enterprise_linux_8:dotnet-sdk-8.0-source-built-artifacts","product":"dotnet-sdk-8.0-source-built-artifacts as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_enterprise_linux_8:netstandard-targeting-pack-2.1","product":"netstandard-targeting-pack-2.1 as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/netstandard-targeting-pack-2.1","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_enterprise_linux_9:dotnet-host","product":"dotnet-host as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/dotnet-host","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_enterprise_linux_9:dotnet-sdk-8.0-source-built-artifacts","product":"dotnet-sdk-8.0-source-built-artifacts as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_enterprise_linux_9:linux-sgx.src","product":"linux-sgx.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/linux-sgx?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_enterprise_linux_9:sgx-pccs","product":"sgx-pccs as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/sgx-pccs","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9","product":"rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-gaudi-rhel9@sha256:e1057b59ca1be9501332abf97230855e85c7df858356be0da9dce230ea7e98e1?repository_url=registry.redhat.io/rhelai3/bootc-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-core-bff-rhel9","product":"rhoai/odh-core-bff-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-core-bff-rhel9@sha256:e683d11de1a782b2a796c99eccb5dfb3b908e721210ba87c2e06768f1fa8745d?repository_url=registry.redhat.io/rhoai/odh-core-bff-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-automl-rhel9","product":"rhoai/odh-mod-arch-automl-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-mod-arch-automl-rhel9@sha256:93239529dd6854c6b03a9ded073fa6d1f07eb7377b56bf466669ab539919e48d?repository_url=registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-mlflow-rhel9","product":"rhoai/odh-mod-arch-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-mod-arch-mlflow-rhel9@sha256:53674c7c6aa3d0e35160f4297fe15411230ebbd6d67092c8b4905e898b98e5ec?repository_url=registry.redhat.io/rhoai/odh-mod-arch-mlflow-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_openshift_container_platform_4:openshift4/ose-monitoring-plugin-rhel9","product":"openshift4/ose-monitoring-plugin-rhel9 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ose-monitoring-plugin-rhel9@sha256:229583810adef94017fa3dd3a408b91a4eeda3b17371d790d9158ebee7d584c3?repository_url=registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_openshift_dev_spaces:devspaces/code-rhel9","product":"devspaces/code-rhel9 as a component of Red Hat OpenShift Dev Spaces","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/code-rhel9@sha256:2a80ac1e2c7f68dd5b726d49b5a660959de0036d992356bb742eb08349563dec?repository_url=registry.redhat.io/devspaces/code-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_quay_3:quay/quay-rhel9","product":"quay/quay-rhel9 as a component of Red Hat Quay 3","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:oci/quay-rhel9@sha256:b46e49899b93a545a51f89574bbbb3f15c73389a978626e223b8e536a9ca7f46?repository_url=registry.redhat.io/quay/quay-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_satellite_6:satellite/iop-host-inventory-frontend-rhel9","product":"satellite/iop-host-inventory-frontend-rhel9 as a component of Red Hat Satellite 6","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/iop-host-inventory-frontend-rhel9@sha256:7c39ecb6f63fa79890ec88707870eb2f665fa49de6e42eb5c41807044725933a?repository_url=registry.redhat.io/satellite/iop-host-inventory-frontend-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"self-service_automation_portal_2:ansible-automation-platform/bootc-automation-portal-rhel9","product":"ansible-automation-platform/bootc-automation-portal-rhel9 as a component of Self-service automation portal 2","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-automation-portal-rhel9@sha256:8553c734145775879bdfe2befa9f2df1c22c6d7db2f2251401c3cc517a7e0394?repository_url=registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_hardened_images:dotnet8.0.src","product":"dotnet8.0.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/dotnet8.0?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]},{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json","productId":"red_hat_hardened_images:prometheus3.13.src","product":"prometheus3.13.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/prometheus3.13@3.13.4-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-110306","modified":"2026-10-20T11:09:01+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-110306.json"}]}],"vendorCoverage":{"total":150,"shown":32,"omitted":118,"source":"redhat"}}