{"schema":"vulnpedia.research/1","cve":"CVE-2026-59884","references":[{"url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j","tags":["x_refsource_CONFIRM","Third Party Advisory","WEB","ADVISORY","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-07-14T16:41:10.277Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-07-14T16:41:10.277Z","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j"},{"source":"nvd","sourceId":"CVE-2026-59884","modified":"2026-07-21T14:37:52.160","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j"},{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j"},{"source":"pysec","sourceId":"PYSEC-2026-3455","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j"},{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","modified":"2026-09-10T03:50:52.562707948Z","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j"},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-m4p7-r5rc-7g4j"}]},{"url":"https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5","tags":["x_refsource_MISC","Patch","WEB","FIX","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-07-14T16:41:10.277Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-07-14T16:41:10.277Z","url":"https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5"},{"source":"nvd","sourceId":"CVE-2026-59884","modified":"2026-07-21T14:37:52.160","url":"https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5"},{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","url":"https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5"},{"source":"pysec","sourceId":"PYSEC-2026-3455","url":"https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5"},{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","modified":"2026-09-10T03:50:52.562707948Z","url":"https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5"},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://github.com/pyasn1/pyasn1/commit/628e36ecbb5277a3f01572ce418ef54271b165a5"}]},{"url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4","tags":["x_refsource_MISC","Release Notes","WEB","ADVISORY","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-07-14T16:41:10.277Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-07-14T16:41:10.277Z","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"},{"source":"nvd","sourceId":"CVE-2026-59884","modified":"2026-07-21T14:37:52.160","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"},{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"},{"source":"pysec","sourceId":"PYSEC-2026-3455","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"},{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","modified":"2026-09-10T03:50:52.562707948Z","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"}]},{"url":"https://osv.dev/vulnerability/GHSA-m4p7-r5rc-7g4j","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","modified":"2026-09-10T03:50:52.562707948Z","origins":[{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","url":"https://osv.dev/vulnerability/GHSA-m4p7-r5rc-7g4j"},{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","modified":"2026-09-10T03:50:52.562707948Z","url":"https://osv.dev/vulnerability/GHSA-m4p7-r5rc-7g4j"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59884","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","modified":"2026-09-10T03:50:52.562707948Z","origins":[{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59884"},{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","modified":"2026-09-10T03:50:52.562707948Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59884"},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59884"}]},{"url":"https://github.com/pyasn1/pyasn1","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","modified":"2026-09-10T03:50:52.562707948Z","origins":[{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","url":"https://github.com/pyasn1/pyasn1"},{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","modified":"2026-09-10T03:50:52.562707948Z","url":"https://github.com/pyasn1/pyasn1"}]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/pyasn1/PYSEC-2026-3455.yaml","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","modified":"2026-09-10T03:50:52.562707948Z","origins":[{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","url":"https://github.com/pypa/advisory-database/tree/main/vulns/pyasn1/PYSEC-2026-3455.yaml"},{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","modified":"2026-09-10T03:50:52.562707948Z","url":"https://github.com/pypa/advisory-database/tree/main/vulns/pyasn1/PYSEC-2026-3455.yaml"}]},{"url":"https://osv.dev/vulnerability/PYSEC-2026-3455","tags":["ADVISORY"],"source":"pysec","sourceId":"PYSEC-2026-3455","modified":"2026-07-22T11:00:08.839373736Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-3455","url":"https://osv.dev/vulnerability/PYSEC-2026-3455"},{"source":"pysec","sourceId":"PYSEC-2026-3455","modified":"2026-07-22T11:00:08.839373736Z","url":"https://osv.dev/vulnerability/PYSEC-2026-3455"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59884","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-59884"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500204","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500204"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59884","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-59884"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:59518","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://access.redhat.com/errata/RHSA-2026:59518"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:62336","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://access.redhat.com/errata/RHSA-2026:62336"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:87410","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://access.redhat.com/errata/RHSA-2026:87410"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84734","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84734"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:60520","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://access.redhat.com/errata/RHSA-2026:60520"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:83121","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://access.redhat.com/errata/RHSA-2026:83121"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:62335","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://access.redhat.com/errata/RHSA-2026:62335"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:40236","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://access.redhat.com/errata/RHSA-2026:40236"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:73987","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://access.redhat.com/errata/RHSA-2026:73987"}]},{"source":"euvd","sourceId":"EUVD-2026-43956","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43956","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-43956","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43956"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","url":"https://osv.dev/vulnerability/GHSA-m4p7-r5rc-7g4j","ecosystem":"PyPI","name":"pyasn1","purl":"pkg:pypi/pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.4"}]}],"versions":["0.0.10a","0.0.11a","0.0.12a","0.0.13","0.0.13a","0.0.13b","0.0.6a","0.0.9a","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.1.8","0.1.9","0.2.1","0.2.2","0.2.3","0.3.1","0.3.2","0.3.3","0.3.4","0.3.5","0.3.6","0.3.7","0.4.1","0.4.2","0.4.3","0.4.4","0.4.5","0.4.6","0.4.7","0.4.8","0.5.0","0.5.1","0.6.0","0.6.1","0.6.2","0.6.3"],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-m4p7-r5rc-7g4j/GHSA-m4p7-r5rc-7g4j.json"},"modified":"2026-09-10T03:50:52.562707948Z","origins":[{"source":"ghsa","sourceId":"GHSA-m4p7-r5rc-7g4j","modified":"2026-09-10T03:50:52.562707948Z","url":"https://osv.dev/vulnerability/GHSA-m4p7-r5rc-7g4j"}]},{"source":"pysec","sourceId":"PYSEC-2026-3455","url":"https://osv.dev/vulnerability/PYSEC-2026-3455","ecosystem":"PyPI","name":"pyasn1","purl":"pkg:pypi/pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.4"}]}],"versions":["0.0.10a","0.0.11a","0.0.12a","0.0.13","0.0.13a","0.0.13b","0.0.6a","0.0.9a","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.1.8","0.1.9","0.2.1","0.2.2","0.2.3","0.3.1","0.3.2","0.3.3","0.3.4","0.3.5","0.3.6","0.3.7","0.4.1","0.4.2","0.4.3","0.4.4","0.4.5","0.4.6","0.4.7","0.4.8","0.5.0","0.5.1","0.6.0","0.6.1","0.6.2","0.6.3"],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/pyasn1/PYSEC-2026-3455.yaml"},"modified":"2026-07-22T11:00:08.839373736Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-3455","modified":"2026-07-22T11:00:08.839373736Z","url":"https://osv.dev/vulnerability/PYSEC-2026-3455"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:5417790c2abbff7a0b4ca9fcd672a8e613a1cdfe2cf8afa10ec47a8883905189_amd64","product":"registry.redhat.io/rhaiis/model-opt-cuda-rhel9@sha256:5417790c2abbff7a0b4ca9fcd672a8e613a1cdfe2cf8afa10ec47a8883905189_amd64 as a component of Red Hat AI Inference Server 3.3","status":"fixed","remediations":[{"category":"vendor_fix","details":"For more information visit https://access.redhat.com/errata/RHSA-2026:59518","url":"https://access.redhat.com/errata/RHSA-2026:59518"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."}],"purl":"pkg:oci/model-opt-cuda-rhel9@sha256%3A5417790c2abbff7a0b4ca9fcd672a8e613a1cdfe2cf8afa10ec47a8883905189?arch=amd64&repository_url=registry.redhat.io/rhaiis/model-opt-cuda-rhel9&tag=1787601159","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64","product":"registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5_amd64 as a component of Red Hat Enterprise Linux AI 3.3","status":"fixed","remediations":[{"category":"vendor_fix","details":"The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3","url":"https://access.redhat.com/errata/RHSA-2026:62336"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."}],"purl":"pkg:oci/bootc-gcp-cuda-rhel9@sha256%3A7a63d3116445dfc773d9b004b4c31e2f3ee7ef244a783c2e3d16582e285b35e5?arch=amd64&repository_url=registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9&tag=1788273977","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:78ef44a2ed8bb9ace068af64e10eeaddfb8d4e9826bea5554ef46ac2a5c9ad73_arm64","product":"registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:78ef44a2ed8bb9ace068af64e10eeaddfb8d4e9826bea5554ef46ac2a5c9ad73_arm64 as a component of Red Hat OpenShift AI 2.25","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 2.25.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:87410"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."}],"purl":"pkg:oci/odh-feature-server-rhel9@sha256%3A78ef44a2ed8bb9ace068af64e10eeaddfb8d4e9826bea5554ef46ac2a5c9ad73?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-feature-server-rhel9&tag=1792148523","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:5df7d7c98f80be61f6b0b0adf11069494eea29c88387ed8b46538bf258dfb5a5_ppc64le","product":"registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:5df7d7c98f80be61f6b0b0adf11069494eea29c88387ed8b46538bf258dfb5a5_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."}],"purl":"pkg:oci/odh-feature-server-rhel9@sha256%3A5df7d7c98f80be61f6b0b0adf11069494eea29c88387ed8b46538bf258dfb5a5?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-feature-server-rhel9&tag=1791863220","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-mlflow-rhel9@sha256:4e1d4dc5b792364e2cfb31cd20e184c01aeff4ae0fa55dfc3d68aafb2a50a7f5_arm64","product":"registry.redhat.io/rhoai/odh-mlflow-rhel9@sha256:4e1d4dc5b792364e2cfb31cd20e184c01aeff4ae0fa55dfc3d68aafb2a50a7f5_arm64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."}],"purl":"pkg:oci/odh-mlflow-rhel9@sha256%3A4e1d4dc5b792364e2cfb31cd20e184c01aeff4ae0fa55dfc3d68aafb2a50a7f5?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9&tag=1787226790","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:69ee4240b85018bdcf1da71892e2f9af24ee32e3f28d92201cfd6f8e30027a64_amd64","product":"registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:69ee4240b85018bdcf1da71892e2f9af24ee32e3f28d92201cfd6f8e30027a64_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."}],"purl":"pkg:oci/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256%3A69ee4240b85018bdcf1da71892e2f9af24ee32e3f28d92201cfd6f8e30027a64?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9&tag=1787073866","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:a9ada15c58e4d22767510fc654207223b5b586c89a1b897d5cc92647158a56ad_amd64","product":"registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:a9ada15c58e4d22767510fc654207223b5b586c89a1b897d5cc92647158a56ad_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."}],"purl":"pkg:oci/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256%3Aa9ada15c58e4d22767510fc654207223b5b586c89a1b897d5cc92647158a56ad?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9&tag=1787073451","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9@sha256:d5cc3e7ad03f83104f3d1d4038fb2a4fa11dfa7501ce6be28ac568459a56f089_amd64","product":"registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9@sha256:d5cc3e7ad03f83104f3d1d4038fb2a4fa11dfa7501ce6be28ac568459a56f089_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."}],"purl":"pkg:oci/odh-training-cuda128-torch29-py312-rhel9@sha256%3Ad5cc3e7ad03f83104f3d1d4038fb2a4fa11dfa7501ce6be28ac568459a56f089?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9&tag=1786611803","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:8b383544df737cf00bac9ce111db652e418e7c5afac87178545e81d63dda5396_ppc64le","product":"registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:8b383544df737cf00bac9ce111db652e418e7c5afac87178545e81d63dda5396_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."}],"purl":"pkg:oci/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256%3A8b383544df737cf00bac9ce111db652e418e7c5afac87178545e81d63dda5396?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9&tag=1787121387","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256:e15a412f74c1a63d3228cf473766769cc25245c29f84f189b82998fea7ed0524_amd64","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256:e15a412f74c1a63d3228cf473766769cc25245c29f84f189b82998fea7ed0524_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."}],"purl":"pkg:oci/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256%3Ae15a412f74c1a63d3228cf473766769cc25245c29f84f189b82998fea7ed0524?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9&tag=1787073546","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256:c78ea41efa92d8e87111cb254c1943ae285b326c68a0749c5b77c12ceb8209b5_amd64","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256:c78ea41efa92d8e87111cb254c1943ae285b326c68a0749c5b77c12ceb8209b5_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."}],"purl":"pkg:oci/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256%3Ac78ea41efa92d8e87111cb254c1943ae285b326c68a0749c5b77c12ceb8209b5?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9&tag=1787073593","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"exploit_intelligence:exploit-intelligence-tech-preview/vulnerability-analysis-rhel9","product":"exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vulnerability-analysis-rhel9?repository_url=registry.redhat.io/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"openshift_service_mesh_3:openshift-service-mesh/kiali-rhel9-operator","product":"openshift-service-mesh/kiali-rhel9-operator as a component of OpenShift Service Mesh 3","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/kiali-rhel9-operator?repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform-24/platform-resource-runner-rhel8","product":"ansible-automation-platform-24/platform-resource-runner-rhel8 as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/platform-resource-runner-rhel8?repository_url=registry.redhat.io/ansible-automation-platform-24/platform-resource-runner-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform-26/gateway-rhel9-operator","product":"ansible-automation-platform-26/gateway-rhel9-operator as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/gateway-rhel9-operator?repository_url=registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform-27/eda-controller-rhel9","product":"ansible-automation-platform-27/eda-controller-rhel9 as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/eda-controller-rhel9?repository_url=registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform-27/platform-resource-rhel9-operator","product":"ansible-automation-platform-27/platform-resource-rhel9-operator as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/platform-resource-rhel9-operator?repository_url=registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"red_hat_enterprise_linux_6:python-pyasn1.src","product":"python-pyasn1.src as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/python-pyasn1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"red_hat_enterprise_linux_7:resource-agents.src","product":"resource-agents.src as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/resource-agents?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-rocm-rhel9","product":"rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-azure-rocm-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"red_hat_openstack_platform_18.0:rhoso-operators/ee-openstack-ansible-ee-rhel9","product":"rhoso-operators/ee-openstack-ansible-ee-rhel9 as a component of Red Hat OpenStack Platform 18.0","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ee-openstack-ansible-ee-rhel9?repository_url=registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"service_telemetry_framework_1.5:stf/smart-gateway-rhel9-operator","product":"stf/smart-gateway-rhel9-operator as a component of Service Telemetry Framework 1.5","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1/BER input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/smart-gateway-rhel9-operator?repository_url=registry.redhat.io/stf/smart-gateway-rhel9-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64","product":"registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:e78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352_amd64 as a component of Red Hat Enterprise Linux AI 3.3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/bootc-azure-rocm-rhel9@sha256%3Ae78b6e0cc5eeb8a46beda69660499f08322fa0d59d382dcd1349af2a0e96e352?arch=amd64&repository_url=registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9&tag=1788273908","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:d1b9e5c33407a54d27fa385cbebcda4b5342a3fa22015392bf6ace2048b45354_ppc64le","product":"registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:d1b9e5c33407a54d27fa385cbebcda4b5342a3fa22015392bf6ace2048b45354_ppc64le as a component of Red Hat OpenShift AI 2.25","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-model-registry-rhel9@sha256%3Ad1b9e5c33407a54d27fa385cbebcda4b5342a3fa22015392bf6ace2048b45354?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-model-registry-rhel9&tag=1791864681","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 3.3:registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:8b5292b6c75adc97657b5dcf0ac6e9792cd90c7d39b35fd2feaaf3512d90786d_amd64","product":"registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:8b5292b6c75adc97657b5dcf0ac6e9792cd90c7d39b35fd2feaaf3512d90786d_amd64 as a component of Red Hat OpenShift AI 3.3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-feature-server-rhel9@sha256%3A8b5292b6c75adc97657b5dcf0ac6e9792cd90c7d39b35fd2feaaf3512d90786d?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-feature-server-rhel9&tag=1789745631","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 3.3:registry.redhat.io/rhoai/odh-operator-bundle@sha256:ae32485cbaa3a592a20fb1fcd88fcd70c2dd32425f8ed4b220a04361c5a0d332_amd64","product":"registry.redhat.io/rhoai/odh-operator-bundle@sha256:ae32485cbaa3a592a20fb1fcd88fcd70c2dd32425f8ed4b220a04361c5a0d332_amd64 as a component of Red Hat OpenShift AI 3.3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-operator-bundle@sha256%3Aae32485cbaa3a592a20fb1fcd88fcd70c2dd32425f8ed4b220a04361c5a0d332?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-operator-bundle&tag=1790687427","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:3037ef27d81723dbe3ca98bf55c5c93fff42f3fad5935559cbf6eb272778ed7f_ppc64le","product":"registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:3037ef27d81723dbe3ca98bf55c5c93fff42f3fad5935559cbf6eb272778ed7f_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-built-in-detector-rhel9@sha256%3A3037ef27d81723dbe3ca98bf55c5c93fff42f3fad5935559cbf6eb272778ed7f?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-built-in-detector-rhel9&tag=1786617316","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-kserve-router-rhel9@sha256:3d602b9c38076730a0972ed143ff886d2018ef9ffbcc9ca339ad8dade8bfb05f_ppc64le","product":"registry.redhat.io/rhoai/odh-kserve-router-rhel9@sha256:3d602b9c38076730a0972ed143ff886d2018ef9ffbcc9ca339ad8dade8bfb05f_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-kserve-router-rhel9@sha256%3A3d602b9c38076730a0972ed143ff886d2018ef9ffbcc9ca339ad8dade8bfb05f?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-kserve-router-rhel9&tag=1791468401","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:4bf7ba62f0216fba6d2951bdef4ba108652781a3d83169e0d1ea7ef53a686c4c_arm64","product":"registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:4bf7ba62f0216fba6d2951bdef4ba108652781a3d83169e0d1ea7ef53a686c4c_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256%3A4bf7ba62f0216fba6d2951bdef4ba108652781a3d83169e0d1ea7ef53a686c4c?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9&tag=1787332141","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:e8ae33b9ef41b33d120fd3aecc214660c22e5903f4fbf03b57121f1fab4218ce_arm64","product":"registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9@sha256:e8ae33b9ef41b33d120fd3aecc214660c22e5903f4fbf03b57121f1fab4218ce_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-model-registry-job-async-upload-rhel9@sha256%3Ae8ae33b9ef41b33d120fd3aecc214660c22e5903f4fbf03b57121f1fab4218ce?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-model-registry-job-async-upload-rhel9&tag=1791870571","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-th06-rocm64-torch291-py312-rhel9@sha256:30dcf995cf88e3b12fb2ed508e357b2801bbaa43e43af2a6791d6dd125b7e35e_amd64","product":"registry.redhat.io/rhoai/odh-th06-rocm64-torch291-py312-rhel9@sha256:30dcf995cf88e3b12fb2ed508e357b2801bbaa43e43af2a6791d6dd125b7e35e_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-th06-rocm64-torch291-py312-rhel9@sha256%3A30dcf995cf88e3b12fb2ed508e357b2801bbaa43e43af2a6791d6dd125b7e35e?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-th06-rocm64-torch291-py312-rhel9&tag=1791872119","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]},{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-nemo-guardrails-server-rhel9","product":"rhoai/odh-trustyai-nemo-guardrails-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:oci/odh-trustyai-nemo-guardrails-server-rhel9?repository_url=registry.redhat.io/rhoai/odh-trustyai-nemo-guardrails-server-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-59884","modified":"2026-10-22T05:53:23+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59884.json"}]}],"vendorCoverage":{"total":1207,"shown":32,"omitted":1175,"source":"redhat"}}