{"schema":"vulnpedia.research/1","cve":"CVE-2026-112898","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-rfgq-q3w2-pmv2","tags":["x_refsource_CONFIRM","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T22:04:23.462Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T22:04:23.462Z","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-rfgq-q3w2-pmv2"},{"source":"nvd","sourceId":"CVE-2026-112898","modified":"2026-10-20T19:48:50.250","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-rfgq-q3w2-pmv2"},{"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-rfgq-q3w2-pmv2"},{"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","modified":"2026-10-26T08:55:50.383984569Z","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-rfgq-q3w2-pmv2"},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-rfgq-q3w2-pmv2"}]},{"url":"https://github.com/python-pillow/Pillow/commit/13943c8f857b22f073d30f0ef9b725a0d255f1a4","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T22:04:23.462Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T22:04:23.462Z","url":"https://github.com/python-pillow/Pillow/commit/13943c8f857b22f073d30f0ef9b725a0d255f1a4"},{"source":"nvd","sourceId":"CVE-2026-112898","modified":"2026-10-20T19:48:50.250","url":"https://github.com/python-pillow/Pillow/commit/13943c8f857b22f073d30f0ef9b725a0d255f1a4"},{"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","url":"https://github.com/python-pillow/Pillow/commit/13943c8f857b22f073d30f0ef9b725a0d255f1a4"},{"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","modified":"2026-10-26T08:55:50.383984569Z","url":"https://github.com/python-pillow/Pillow/commit/13943c8f857b22f073d30f0ef9b725a0d255f1a4"},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://github.com/python-pillow/Pillow/commit/13943c8f857b22f073d30f0ef9b725a0d255f1a4"}]},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T22:04:23.462Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T22:04:23.462Z","url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0"},{"source":"nvd","sourceId":"CVE-2026-112898","modified":"2026-10-20T19:48:50.250","url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0"},{"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0"},{"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","modified":"2026-10-26T08:55:50.383984569Z","url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0"},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-rfgq-q3w2-pmv2","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","modified":"2026-10-26T08:55:50.383984569Z","origins":[{"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","url":"https://osv.dev/vulnerability/GHSA-rfgq-q3w2-pmv2"},{"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","modified":"2026-10-26T08:55:50.383984569Z","url":"https://osv.dev/vulnerability/GHSA-rfgq-q3w2-pmv2"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112898","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","modified":"2026-10-26T08:55:50.383984569Z","origins":[{"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112898"},{"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","modified":"2026-10-26T08:55:50.383984569Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112898"},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112898"}]},{"url":"https://github.com/python-pillow/Pillow","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","modified":"2026-10-26T08:55:50.383984569Z","origins":[{"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","url":"https://github.com/python-pillow/Pillow"},{"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","modified":"2026-10-26T08:55:50.383984569Z","url":"https://github.com/python-pillow/Pillow"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-112898","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-112898"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555887","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555887"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-112898","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-112898"}]},{"source":"euvd","sourceId":"EUVD-2026-104660","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104660","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-104660","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104660"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","url":"https://osv.dev/vulnerability/GHSA-rfgq-q3w2-pmv2","ecosystem":"PyPI","name":"pillow","purl":"pkg:pypi/pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.0"},{"fixed":"13.0.0"}]}],"versions":["10.0.0","10.0.1","10.1.0","10.2.0","10.3.0","10.4.0","11.0.0","11.1.0","11.2.1","11.3.0","12.0.0","12.1.0","12.1.1","12.2.0","12.3.0","9.1.0","9.1.1","9.2.0","9.3.0","9.4.0","9.5.0"],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-rfgq-q3w2-pmv2/GHSA-rfgq-q3w2-pmv2.json"},"modified":"2026-10-26T08:55:50.383984569Z","origins":[{"source":"ghsa","sourceId":"GHSA-rfgq-q3w2-pmv2","modified":"2026-10-26T08:55:50.383984569Z","url":"https://osv.dev/vulnerability/GHSA-rfgq-q3w2-pmv2"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"exploit_intelligence:exploit-intelligence/vulnerability-analysis-rhel9","product":"exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:oci/vulnerability-analysis-rhel9@sha256:64fb01357ccdad3fde5b4448664a57967117e94418a26c6d8022fb4a7f31a4de?repository_url=registry.redhat.io/exploit-intelligence/vulnerability-analysis-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"lightspeed_core:lightspeed-core/rag-tool-cuda-12.9-rhel9","product":"lightspeed-core/rag-tool-cuda-12.9-rhel9 as a component of Lightspeed Core","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/rag-tool-cuda-12.9-rhel9@sha256:debaa9576c814467958eca6fe0fe83567616dd6888b66bd1c3a827487b54eae8?repository_url=registry.redhat.io/lightspeed-core/rag-tool-cuda-12.9-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"openshift_lightspeed:openshift-lightspeed/lightspeed-service-api-rhel9","product":"openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/lightspeed-service-api-rhel9@sha256:549741e9fd7be35beae7dadcc53fa67c49c71729ee6e2d78f3d91f01c5862e08?repository_url=registry.redhat.io/openshift-lightspeed/lightspeed-service-api-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_ai_inference_server:rhaii/vllm-cuda-rhel9","product":"rhaii/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-cuda-rhel9@sha256:6fd99a17c8a03562b2a003077ef51bb32d92dbe6c255bf8126ce933230715bb8?repository_url=registry.redhat.io/rhaii/vllm-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_ai_inference_server:rhaii/vllm-rocm-rhel9","product":"rhaii/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852?repository_url=registry.redhat.io/rhaii/vllm-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_ai_inference_server:rhaiis/model-opt-cuda-rhel9","product":"rhaiis/model-opt-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/model-opt-cuda-rhel9@sha256:5c5749e9e04d2a0b88525c1e78145f27ce80f018855da5bae09cb2cd97536072?repository_url=registry.redhat.io/rhaiis/model-opt-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-neuron-rhel9","product":"rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-neuron-rhel9@sha256:8ba72cec5d79b1a751eb09774c81fd6181b43ec69a2e5116982661b34366874d?repository_url=registry.redhat.io/rhaiis/vllm-neuron-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-tpu-rhel9","product":"rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-tpu-rhel9@sha256:b1c12112a1e8a298645e10d34d44c9961a6121aa8d87fc5d65ad83e1ffa3c586?repository_url=registry.redhat.io/rhaiis/vllm-tpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform-26/lightspeed-chatbot-rhel9","product":"ansible-automation-platform-26/lightspeed-chatbot-rhel9 as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307?repository_url=registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform/automation-dashboard-rhel9","product":"ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:oci/automation-dashboard-rhel9@sha256:3971cc95bbedd16996776c4aadfaeac576ef3b0ad212825a4035fb40849b2bc4?repository_url=registry.redhat.io/ansible-automation-platform/automation-dashboard-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_ansible_automation_platform_2:python3.12-pillow.src","product":"python3.12-pillow.src as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/python3.12-pillow@12.3.0-1.el9ap?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_enterprise_linux_8:python3-pillow","product":"python3-pillow as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/python3-pillow","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_enterprise_linux_8:python3-pillow-tk","product":"python3-pillow-tk as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/python3-pillow-tk","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-rocm-rhel9","product":"rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-azure-rocm-rhel9@sha256:87723c21f48eb371968e2d68346953f2a03a3cf643a967801b84696ee3e1f1e8?repository_url=registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gcp-cuda-rhel9","product":"rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-gcp-cuda-rhel9@sha256:c1a193fa047eedbbf52be0b1d0f5d52e3e572d144a871f7c9322a34ba5abd92f?repository_url=registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_lightspeed_services_for_ocp:lightspeed-services-ocp/ocp-rules-rhel9","product":"lightspeed-services-ocp/ocp-rules-rhel9 as a component of Red Hat Lightspeed Services for OCP","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ocp-rules-rhel9@sha256:eef3777c32b7024321b6270986c38e45feed54039bbe20f3fdfb0d272b086d2e?repository_url=registry.redhat.io/lightspeed-services-ocp/ocp-rules-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_openshift_ai_(rhoai):rhai/guidellm-rhel9","product":"rhai/guidellm-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/guidellm-rhel9@sha256:1021f45f649c8ce88799bada572bfa8d2295bca8eeb811cfc1218ef2004f4f02?repository_url=registry.redhat.io/rhai/guidellm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-caikit-tgis-serving-rhel9","product":"rhoai/odh-caikit-tgis-serving-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-caikit-tgis-serving-rhel9@sha256:308080b253a1935f47fd758a182588b77543b95740f94a4fcd491dd451d04ced?repository_url=registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-autogluon-server-rhel9","product":"rhoai/odh-kserve-autogluon-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-kserve-autogluon-server-rhel9@sha256:d16a3db7f9491439c9ffa90d81e1e45eeaa17ce64b1dbd8eaaf6a3b7948a99fa?repository_url=registry.redhat.io/rhoai/odh-kserve-autogluon-server-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-storage-initializer-rhel9","product":"rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-kserve-storage-initializer-rhel9@sha256:c38b5115537b4cef431095e26b04f35b700095b05811f1e26e7e25b1f2cb4780?repository_url=registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9","product":"rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-mlflow-rhel9@sha256:26ac33d2d07f9d51df725604ca695c98597f9bf428f6038bb1d74f9405e8db2d?repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9","product":"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:61ebc00090a7b3edb1e19b2c0aa407fea02be75fd5dda4a5f315adb1c1d0a434?repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9","product":"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-pipeline-runtime-pytorch-rocm-py312-rhel9@sha256:8bf2de878394390a6254b889783bd87185b573d93487055364326e864a404dc7?repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cpu-py312-rhel9","product":"rhoai/odh-th-torch-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-th-torch-cpu-py312-rhel9@sha256:d265d1398bceb2d971d725e27e81c8def1213b2f0dc265a37707b2f4270317ca?repository_url=registry.redhat.io/rhoai/odh-th-torch-cpu-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9","product":"rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-th06-cpu-torch210-py312-rhel9@sha256:cdd7d9f982c1f8a94dd4aad43e705274aae1bf0942e0442e60c3973f9c198f23?repository_url=registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9","product":"rhoai/odh-th06-cuda130-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-th06-cuda130-torch291-py312-rhel9@sha256:4a92ec3c409a7c6ef662a2fe902e8bfff42392385f668e20fc4825d03bc838cd?repository_url=registry.redhat.io/rhoai/odh-th06-cuda130-torch291-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-training-rocm64-torch29-py312-rhel9","product":"rhoai/odh-training-rocm64-torch29-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-training-rocm64-torch29-py312-rhel9@sha256:2fc5a3b4139e590e072b735ec43a3d9c2e30dab8ad6c01261cfe33d24fa8e771?repository_url=registry.redhat.io/rhoai/odh-training-rocm64-torch29-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-vllm-gaudi-rhel9","product":"rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-vllm-gaudi-rhel9@sha256:87eec3862eb6ddef445f89dcf6fd89add7ef202ea7c563b1ee7347537fb3e250?repository_url=registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","product":"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-workbench-jupyter-pytorch-cuda-py312-rhel9@sha256:f476e56ad00faaad5f2e26010f633233db2d4b299d7c5281e2f4ac46949b531b?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","product":"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9@sha256:a9919e8b5cedd66870a6d6f464883ea3182ac749a72bb590e0298d3ae8a4f78a?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_quay_3:quay/quay-rhel8","product":"quay/quay-rhel8 as a component of Red Hat Quay 3","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:oci/quay-rhel8@sha256:f33464ccc07e05781c2ec093df7fd9093b5ab0aae6435c11d632cc1332a560ee?repository_url=registry.redhat.io/quay/quay-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]},{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json","productId":"red_hat_satellite_6:python3.12-pillow.src","product":"python3.12-pillow.src as a component of Red Hat Satellite 6","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/python3.12-pillow@12.3.0-1.el9ap?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-112898","modified":"2026-10-19T23:41:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112898.json"}]}],"vendorCoverage":{"total":94,"shown":32,"omitted":62,"source":"redhat"}}