{"schema":"vulnpedia.research/1","cve":"CVE-2026-113657","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-374f-7chj-9948","tags":["x_refsource_CONFIRM","exploit","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T16:54:12.995Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T16:54:12.995Z","url":"https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-374f-7chj-9948"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-20T17:08:06.854Z","url":"https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-374f-7chj-9948"},{"source":"nvd","sourceId":"CVE-2026-113657","modified":"2026-10-20T19:53:10.247","url":"https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-374f-7chj-9948"},{"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","url":"https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-374f-7chj-9948"},{"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","modified":"2026-10-20T18:30:03.591034807Z","url":"https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-374f-7chj-9948"},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-374f-7chj-9948"}]},{"url":"https://github.com/apostrophecms/apostrophe/commit/9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T16:54:12.995Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T16:54:12.995Z","url":"https://github.com/apostrophecms/apostrophe/commit/9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce"},{"source":"nvd","sourceId":"CVE-2026-113657","modified":"2026-10-20T19:53:10.247","url":"https://github.com/apostrophecms/apostrophe/commit/9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce"},{"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","url":"https://github.com/apostrophecms/apostrophe/commit/9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce"},{"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","modified":"2026-10-20T18:30:03.591034807Z","url":"https://github.com/apostrophecms/apostrophe/commit/9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce"},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://github.com/apostrophecms/apostrophe/commit/9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce"}]},{"url":"https://github.com/apostrophecms/apostrophe/commit/f84fd41cbf6c22eb8d0008fc9c25df1f7130b350","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T16:54:12.995Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T16:54:12.995Z","url":"https://github.com/apostrophecms/apostrophe/commit/f84fd41cbf6c22eb8d0008fc9c25df1f7130b350"},{"source":"nvd","sourceId":"CVE-2026-113657","modified":"2026-10-20T19:53:10.247","url":"https://github.com/apostrophecms/apostrophe/commit/f84fd41cbf6c22eb8d0008fc9c25df1f7130b350"},{"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","url":"https://github.com/apostrophecms/apostrophe/commit/f84fd41cbf6c22eb8d0008fc9c25df1f7130b350"},{"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","modified":"2026-10-20T18:30:03.591034807Z","url":"https://github.com/apostrophecms/apostrophe/commit/f84fd41cbf6c22eb8d0008fc9c25df1f7130b350"},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://github.com/apostrophecms/apostrophe/commit/f84fd41cbf6c22eb8d0008fc9c25df1f7130b350"}]},{"url":"https://github.com/apostrophecms/apostrophe/releases/tag/sanitize-html@2.18.0","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T16:54:12.995Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T16:54:12.995Z","url":"https://github.com/apostrophecms/apostrophe/releases/tag/sanitize-html@2.18.0"},{"source":"nvd","sourceId":"CVE-2026-113657","modified":"2026-10-20T19:53:10.247","url":"https://github.com/apostrophecms/apostrophe/releases/tag/sanitize-html@2.18.0"},{"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","url":"https://github.com/apostrophecms/apostrophe/releases/tag/sanitize-html@2.18.0"},{"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","modified":"2026-10-20T18:30:03.591034807Z","url":"https://github.com/apostrophecms/apostrophe/releases/tag/sanitize-html@2.18.0"},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://github.com/apostrophecms/apostrophe/releases/tag/sanitize-html@2.18.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-374f-7chj-9948","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","modified":"2026-10-20T18:30:03.591034807Z","origins":[{"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","url":"https://osv.dev/vulnerability/GHSA-374f-7chj-9948"},{"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","modified":"2026-10-20T18:30:03.591034807Z","url":"https://osv.dev/vulnerability/GHSA-374f-7chj-9948"}]},{"url":"https://github.com/apostrophecms/apostrophe","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","modified":"2026-10-20T18:30:03.591034807Z","origins":[{"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","url":"https://github.com/apostrophecms/apostrophe"},{"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","modified":"2026-10-20T18:30:03.591034807Z","url":"https://github.com/apostrophecms/apostrophe"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-113657","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-113657"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556338","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556338"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-113657","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-113657"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113657","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113657"}]},{"source":"euvd","sourceId":"EUVD-2026-105186","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105186","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-105186","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105186"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","url":"https://osv.dev/vulnerability/GHSA-374f-7chj-9948","ecosystem":"npm","name":"sanitize-html","purl":"pkg:npm/sanitize-html","ranges":[{"type":"SEMVER","events":[{"introduced":"2.17.7"},{"fixed":"2.18.0"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-374f-7chj-9948/GHSA-374f-7chj-9948.json"},"modified":"2026-10-20T18:30:03.591034807Z","origins":[{"source":"ghsa","sourceId":"GHSA-374f-7chj-9948","modified":"2026-10-20T18:30:03.591034807Z","url":"https://osv.dev/vulnerability/GHSA-374f-7chj-9948"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"cost_management_on_premise:costmanagement/costmanagement-ui-rhel10","product":"costmanagement/costmanagement-ui-rhel10 as a component of Cost Management On Premise","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/costmanagement-ui-rhel10@sha256:39700faac93e613fdd8139aed7b6dbb79a4d542f3f3cca6be04c4edce72eaf5d?repository_url=registry.redhat.io/costmanagement/costmanagement-ui-rhel10","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"multicluster_engine_for_kubernetes:multicluster-engine/console-mce-rhel9","product":"multicluster-engine/console-mce-rhel9 as a component of Multicluster Engine for Kubernetes","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/console-mce-rhel9@sha256:e25a8cf699de55aafdc6b644bc4c1b3405abdff5b669509d990f449ad17b1f51?repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"red_hat_advanced_cluster_management_for_kubernetes_2:rhacm2/console-rhel9","product":"rhacm2/console-rhel9 as a component of Red Hat Advanced Cluster Management for Kubernetes 2","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/console-rhel9@sha256:eea4b6716c64ce4cfee79fc2bbfbf744be82b31b9dc51a0623013fac56265294?repository_url=registry.redhat.io/rhacm2/console-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"red_hat_enterprise_linux_10:cockpit-image-builder","product":"cockpit-image-builder as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/cockpit-image-builder","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"red_hat_enterprise_linux_10:cockpit-image-builder.src","product":"cockpit-image-builder.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/cockpit-image-builder?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"red_hat_hardened_images:prometheus3.5.src","product":"prometheus3.5.src as a component of Red Hat Hardened Images","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/prometheus3.5@3.5.5-0.8.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9","product":"rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-mlflow-rhel9@sha256:4191f9c06ee97bc01d3749155c7cf8eb24de213948ea3517bc195b505c1e799b?repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"red_hat_openshift_container_platform_4:openshift4/ose-agent-installer-ui-rhel9","product":"openshift4/ose-agent-installer-ui-rhel9 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ose-agent-installer-ui-rhel9@sha256:3c4e2bb4cab1817be07b8fb7f94bc884d8b5d30953c21c84339a412f303bc543?repository_url=registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"red_hat_openshift_container_platform_4:openshift4/ose-console","product":"openshift4/ose-console as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ose-console@sha256:ae246b20d41e3463bb19180c11f75cb44b3dae3f3519aa97fe7ba24e07928270?repository_url=registry.redhat.io/openshift4/ose-console","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"red_hat_openshift_container_platform_4:openshift4/ose-console-rhel9","product":"openshift4/ose-console-rhel9 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ose-console-rhel9@sha256:8638a1917f3ff065d34bd2529f093208fa5257d8fa621f2a42a95948ac2cb034?repository_url=registry.redhat.io/openshift4/ose-console-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"red_hat_openshift_dev_spaces:devspaces/dashboard-rhel9","product":"devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/dashboard-rhel9@sha256:bb5346516525fe025ae9cbf1fd3f227fb1cad71ae73ad58264a7e5ffb2931eb3?repository_url=registry.redhat.io/devspaces/dashboard-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"red_hat_quay_3:quay/quay-rhel8","product":"quay/quay-rhel8 as a component of Red Hat Quay 3","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:oci/quay-rhel8@sha256:f33464ccc07e05781c2ec093df7fd9093b5ab0aae6435c11d632cc1332a560ee?repository_url=registry.redhat.io/quay/quay-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"red_hat_quay_3:quay/quay-rhel9","product":"quay/quay-rhel9 as a component of Red Hat Quay 3","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/quay-rhel9@sha256:59726d934010c9215248cb30bd1ad084f03099c0138b8a3c2a3751b209683783?repository_url=registry.redhat.io/quay/quay-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"red_hat_satellite_6:satellite/iop-advisor-frontend-rhel9","product":"satellite/iop-advisor-frontend-rhel9 as a component of Red Hat Satellite 6","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/iop-advisor-frontend-rhel9@sha256:5c98cd17bd4fe98b9a7f21b8dd285477e2262b53723351c607d957bfc422547c?repository_url=registry.redhat.io/satellite/iop-advisor-frontend-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"red_hat_satellite_6:satellite/iop-host-inventory-frontend-rhel9","product":"satellite/iop-host-inventory-frontend-rhel9 as a component of Red Hat Satellite 6","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/iop-host-inventory-frontend-rhel9@sha256:7c39ecb6f63fa79890ec88707870eb2f665fa49de6e42eb5c41807044725933a?repository_url=registry.redhat.io/satellite/iop-host-inventory-frontend-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"red_hat_satellite_6:satellite/iop-vulnerability-frontend-rhel9","product":"satellite/iop-vulnerability-frontend-rhel9 as a component of Red Hat Satellite 6","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/iop-vulnerability-frontend-rhel9@sha256:059b28a4878677f15bd8ae0f591df8605df1a23a1d97c59ccfa1c9c0a9cd36df?repository_url=registry.redhat.io/satellite/iop-vulnerability-frontend-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]},{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json","productId":"red_hat_hardened_images:prometheus3.13.src","product":"prometheus3.13.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/prometheus3.13@3.13.4-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-113657","modified":"2026-10-22T21:29:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113657.json"}]}],"vendorCoverage":{"total":17,"shown":17,"omitted":0,"source":"redhat"}}