{"schema":"vulnpedia.research/1","cve":"CVE-2026-112901","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-xgh8-jp6q-p5x8","tags":["x_refsource_CONFIRM","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T22:09:52.614Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T22:09:52.614Z","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-xgh8-jp6q-p5x8"},{"source":"nvd","sourceId":"CVE-2026-112901","modified":"2026-10-20T19:50:26.943","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-xgh8-jp6q-p5x8"},{"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-xgh8-jp6q-p5x8"},{"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","modified":"2026-10-26T08:56:08.965718404Z","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-xgh8-jp6q-p5x8"},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-xgh8-jp6q-p5x8"}]},{"url":"https://github.com/python-pillow/Pillow/commit/2852a3e3d568997ddec745fc800991f138878f4b","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T22:09:52.614Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T22:09:52.614Z","url":"https://github.com/python-pillow/Pillow/commit/2852a3e3d568997ddec745fc800991f138878f4b"},{"source":"nvd","sourceId":"CVE-2026-112901","modified":"2026-10-20T19:50:26.943","url":"https://github.com/python-pillow/Pillow/commit/2852a3e3d568997ddec745fc800991f138878f4b"},{"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","url":"https://github.com/python-pillow/Pillow/commit/2852a3e3d568997ddec745fc800991f138878f4b"},{"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","modified":"2026-10-26T08:56:08.965718404Z","url":"https://github.com/python-pillow/Pillow/commit/2852a3e3d568997ddec745fc800991f138878f4b"},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://github.com/python-pillow/Pillow/commit/2852a3e3d568997ddec745fc800991f138878f4b"}]},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T22:09:52.614Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-19T22:09:52.614Z","url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0"},{"source":"nvd","sourceId":"CVE-2026-112901","modified":"2026-10-20T19:50:26.943","url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0"},{"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0"},{"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","modified":"2026-10-26T08:56:08.965718404Z","url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0"},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-xgh8-jp6q-p5x8","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","modified":"2026-10-26T08:56:08.965718404Z","origins":[{"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","url":"https://osv.dev/vulnerability/GHSA-xgh8-jp6q-p5x8"},{"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","modified":"2026-10-26T08:56:08.965718404Z","url":"https://osv.dev/vulnerability/GHSA-xgh8-jp6q-p5x8"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112901","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","modified":"2026-10-26T08:56:08.965718404Z","origins":[{"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112901"},{"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","modified":"2026-10-26T08:56:08.965718404Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112901"},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112901"}]},{"url":"https://github.com/python-pillow/Pillow","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","modified":"2026-10-26T08:56:08.965718404Z","origins":[{"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","url":"https://github.com/python-pillow/Pillow"},{"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","modified":"2026-10-26T08:56:08.965718404Z","url":"https://github.com/python-pillow/Pillow"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-112901","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-112901"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555891","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555891"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-112901","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-112901"}]},{"source":"euvd","sourceId":"EUVD-2026-104662","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104662","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-104662","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104662"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","url":"https://osv.dev/vulnerability/GHSA-xgh8-jp6q-p5x8","ecosystem":"PyPI","name":"pillow","purl":"pkg:pypi/pillow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.0"}]}],"versions":["1.0","1.1","1.2","1.3","1.4","1.5","1.6","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","10.0.0","10.0.1","10.1.0","10.2.0","10.3.0","10.4.0","11.0.0","11.1.0","11.2.1","11.3.0","12.0.0","12.1.0","12.1.1","12.2.0","12.3.0","2.0.0","2.1.0","2.2.0","2.2.1","2.2.2","2.3.0","2.3.1","2.3.2","2.4.0","2.5.0","2.5.1","2.5.2","2.5.3","2.6.0","2.6.1","2.6.2","2.7.0","2.8.0","2.8.1","2.8.2","2.9.0","3.0.0","3.1.0","3.1.0.rc1","3.1.0rc1","3.1.1","3.1.2","3.2.0","3.3.0","3.3.1","3.3.2","3.3.3","3.4.0","3.4.1","3.4.2","4.0.0","4.1.0","4.1.1","4.2.0","4.2.1","4.3.0","5.0.0","5.1.0","5.2.0","5.3.0","5.4.0","5.4.0.dev0","5.4.1","6.0.0","6.1.0","6.2.0","6.2.1","6.2.2","7.0.0","7.1.0","7.1.1","7.1.2","7.2.0","8.0.0","8.0.1","8.1.0","8.1.1","8.1.2","8.2.0","8.3.0","8.3.1","8.3.2","8.4.0","9.0.0","9.0.1","9.1.0","9.1.1","9.2.0","9.3.0","9.4.0","9.5.0"],"databaseSpecific":{"last_known_affected_version_range":"<= 12.3.0","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-xgh8-jp6q-p5x8/GHSA-xgh8-jp6q-p5x8.json"},"modified":"2026-10-26T08:56:08.965718404Z","origins":[{"source":"ghsa","sourceId":"GHSA-xgh8-jp6q-p5x8","modified":"2026-10-26T08:56:08.965718404Z","url":"https://osv.dev/vulnerability/GHSA-xgh8-jp6q-p5x8"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"exploit_intelligence:exploit-intelligence/vulnerability-analysis-rhel9","product":"exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:oci/vulnerability-analysis-rhel9@sha256:64fb01357ccdad3fde5b4448664a57967117e94418a26c6d8022fb4a7f31a4de?repository_url=registry.redhat.io/exploit-intelligence/vulnerability-analysis-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"lightspeed_core:lightspeed-core/rag-tool-cuda-12.9-rhel9","product":"lightspeed-core/rag-tool-cuda-12.9-rhel9 as a component of Lightspeed Core","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/rag-tool-cuda-12.9-rhel9@sha256:debaa9576c814467958eca6fe0fe83567616dd6888b66bd1c3a827487b54eae8?repository_url=registry.redhat.io/lightspeed-core/rag-tool-cuda-12.9-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"openshift_lightspeed:openshift-lightspeed/lightspeed-service-api-rhel9","product":"openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/lightspeed-service-api-rhel9@sha256:549741e9fd7be35beae7dadcc53fa67c49c71729ee6e2d78f3d91f01c5862e08?repository_url=registry.redhat.io/openshift-lightspeed/lightspeed-service-api-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_ai_inference_server:rhaii/vllm-cuda-rhel9","product":"rhaii/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-cuda-rhel9@sha256:6fd99a17c8a03562b2a003077ef51bb32d92dbe6c255bf8126ce933230715bb8?repository_url=registry.redhat.io/rhaii/vllm-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_ai_inference_server:rhaii/vllm-rocm-rhel9","product":"rhaii/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-rocm-rhel9@sha256:7b64ac6e235a073d437c3da172c537347c7b54092c09d4ca11594b52ddbd1852?repository_url=registry.redhat.io/rhaii/vllm-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_ai_inference_server:rhaiis/model-opt-cuda-rhel9","product":"rhaiis/model-opt-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/model-opt-cuda-rhel9@sha256:5c5749e9e04d2a0b88525c1e78145f27ce80f018855da5bae09cb2cd97536072?repository_url=registry.redhat.io/rhaiis/model-opt-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-neuron-rhel9","product":"rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-neuron-rhel9@sha256:8ba72cec5d79b1a751eb09774c81fd6181b43ec69a2e5116982661b34366874d?repository_url=registry.redhat.io/rhaiis/vllm-neuron-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-tpu-rhel9","product":"rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vllm-tpu-rhel9@sha256:b1c12112a1e8a298645e10d34d44c9961a6121aa8d87fc5d65ad83e1ffa3c586?repository_url=registry.redhat.io/rhaiis/vllm-tpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform-26/lightspeed-chatbot-rhel9","product":"ansible-automation-platform-26/lightspeed-chatbot-rhel9 as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307?repository_url=registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform/automation-dashboard-rhel9","product":"ansible-automation-platform/automation-dashboard-rhel9 as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:oci/automation-dashboard-rhel9@sha256:3971cc95bbedd16996776c4aadfaeac576ef3b0ad212825a4035fb40849b2bc4?repository_url=registry.redhat.io/ansible-automation-platform/automation-dashboard-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_ansible_automation_platform_2:python3.12-pillow.src","product":"python3.12-pillow.src as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/python3.12-pillow@12.3.0-1.el9ap?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_enterprise_linux_8:python3-pillow","product":"python3-pillow as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/python3-pillow","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_enterprise_linux_8:python3-pillow-tk","product":"python3-pillow-tk as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/python3-pillow-tk","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-rocm-rhel9","product":"rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-azure-rocm-rhel9@sha256:87723c21f48eb371968e2d68346953f2a03a3cf643a967801b84696ee3e1f1e8?repository_url=registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gcp-cuda-rhel9","product":"rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-gcp-cuda-rhel9@sha256:c1a193fa047eedbbf52be0b1d0f5d52e3e572d144a871f7c9322a34ba5abd92f?repository_url=registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_lightspeed_services_for_ocp:lightspeed-services-ocp/ocp-rules-rhel9","product":"lightspeed-services-ocp/ocp-rules-rhel9 as a component of Red Hat Lightspeed Services for OCP","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ocp-rules-rhel9@sha256:eef3777c32b7024321b6270986c38e45feed54039bbe20f3fdfb0d272b086d2e?repository_url=registry.redhat.io/lightspeed-services-ocp/ocp-rules-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_openshift_ai_(rhoai):rhai/guidellm-rhel9","product":"rhai/guidellm-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/guidellm-rhel9@sha256:1021f45f649c8ce88799bada572bfa8d2295bca8eeb811cfc1218ef2004f4f02?repository_url=registry.redhat.io/rhai/guidellm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-caikit-tgis-serving-rhel9","product":"rhoai/odh-caikit-tgis-serving-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-caikit-tgis-serving-rhel9@sha256:308080b253a1935f47fd758a182588b77543b95740f94a4fcd491dd451d04ced?repository_url=registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-autogluon-server-rhel9","product":"rhoai/odh-kserve-autogluon-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-kserve-autogluon-server-rhel9@sha256:d16a3db7f9491439c9ffa90d81e1e45eeaa17ce64b1dbd8eaaf6a3b7948a99fa?repository_url=registry.redhat.io/rhoai/odh-kserve-autogluon-server-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-storage-initializer-rhel9","product":"rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-kserve-storage-initializer-rhel9@sha256:c38b5115537b4cef431095e26b04f35b700095b05811f1e26e7e25b1f2cb4780?repository_url=registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9","product":"rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-mlflow-rhel9@sha256:26ac33d2d07f9d51df725604ca695c98597f9bf428f6038bb1d74f9405e8db2d?repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9","product":"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:61ebc00090a7b3edb1e19b2c0aa407fea02be75fd5dda4a5f315adb1c1d0a434?repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9","product":"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-pipeline-runtime-pytorch-rocm-py312-rhel9@sha256:8bf2de878394390a6254b889783bd87185b573d93487055364326e864a404dc7?repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cpu-py312-rhel9","product":"rhoai/odh-th-torch-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-th-torch-cpu-py312-rhel9@sha256:d265d1398bceb2d971d725e27e81c8def1213b2f0dc265a37707b2f4270317ca?repository_url=registry.redhat.io/rhoai/odh-th-torch-cpu-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9","product":"rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-th06-cpu-torch210-py312-rhel9@sha256:cdd7d9f982c1f8a94dd4aad43e705274aae1bf0942e0442e60c3973f9c198f23?repository_url=registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9","product":"rhoai/odh-th06-cuda130-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-th06-cuda130-torch291-py312-rhel9@sha256:4a92ec3c409a7c6ef662a2fe902e8bfff42392385f668e20fc4825d03bc838cd?repository_url=registry.redhat.io/rhoai/odh-th06-cuda130-torch291-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-training-rocm64-torch29-py312-rhel9","product":"rhoai/odh-training-rocm64-torch29-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-training-rocm64-torch29-py312-rhel9@sha256:2fc5a3b4139e590e072b735ec43a3d9c2e30dab8ad6c01261cfe33d24fa8e771?repository_url=registry.redhat.io/rhoai/odh-training-rocm64-torch29-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-vllm-gaudi-rhel9","product":"rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-vllm-gaudi-rhel9@sha256:87eec3862eb6ddef445f89dcf6fd89add7ef202ea7c563b1ee7347537fb3e250?repository_url=registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","product":"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-workbench-jupyter-pytorch-cuda-py312-rhel9@sha256:f476e56ad00faaad5f2e26010f633233db2d4b299d7c5281e2f4ac46949b531b?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","product":"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9@sha256:a9919e8b5cedd66870a6d6f464883ea3182ac749a72bb590e0298d3ae8a4f78a?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_quay_3:quay/quay-rhel8","product":"quay/quay-rhel8 as a component of Red Hat Quay 3","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:oci/quay-rhel8@sha256:f33464ccc07e05781c2ec093df7fd9093b5ab0aae6435c11d632cc1332a560ee?repository_url=registry.redhat.io/quay/quay-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]},{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json","productId":"red_hat_satellite_6:python3.12-pillow.src","product":"python3.12-pillow.src as a component of Red Hat Satellite 6","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/python3.12-pillow@12.3.0-1.el9ap?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-112901","modified":"2026-10-19T23:41:26+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112901.json"}]}],"vendorCoverage":{"total":94,"shown":32,"omitted":62,"source":"redhat"}}