{"schema":"vulnpedia.research/1","cve":"CVE-2026-59885","references":[{"url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj","tags":["x_refsource_CONFIRM","Third Party Advisory","WEB","ADVISORY","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-07-14T16:40:00.515Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-07-14T16:40:00.515Z","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj"},{"source":"nvd","sourceId":"CVE-2026-59885","modified":"2026-07-21T14:38:21.580","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj"},{"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj"},{"source":"pysec","sourceId":"PYSEC-2026-3456","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj"},{"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","modified":"2026-09-10T03:51:11.103855167Z","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj"},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj"}]},{"url":"https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9","tags":["x_refsource_MISC","Patch","WEB","FIX","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-07-14T16:40:00.515Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-07-14T16:40:00.515Z","url":"https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9"},{"source":"nvd","sourceId":"CVE-2026-59885","modified":"2026-07-21T14:38:21.580","url":"https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9"},{"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","url":"https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9"},{"source":"pysec","sourceId":"PYSEC-2026-3456","url":"https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9"},{"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","modified":"2026-09-10T03:51:11.103855167Z","url":"https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9"},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9"}]},{"url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4","tags":["x_refsource_MISC","Release Notes","WEB","ADVISORY","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-07-14T16:40:00.515Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-07-14T16:40:00.515Z","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"},{"source":"nvd","sourceId":"CVE-2026-59885","modified":"2026-07-21T14:38:21.580","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"},{"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"},{"source":"pysec","sourceId":"PYSEC-2026-3456","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"},{"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","modified":"2026-09-10T03:51:11.103855167Z","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4"}]},{"url":"https://osv.dev/vulnerability/GHSA-8ppf-4f7h-5ppj","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","modified":"2026-09-10T03:51:11.103855167Z","origins":[{"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","url":"https://osv.dev/vulnerability/GHSA-8ppf-4f7h-5ppj"},{"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","modified":"2026-09-10T03:51:11.103855167Z","url":"https://osv.dev/vulnerability/GHSA-8ppf-4f7h-5ppj"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59885","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","modified":"2026-09-10T03:51:11.103855167Z","origins":[{"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59885"},{"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","modified":"2026-09-10T03:51:11.103855167Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59885"},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59885"}]},{"url":"https://github.com/pyasn1/pyasn1","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","modified":"2026-09-10T03:51:11.103855167Z","origins":[{"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","url":"https://github.com/pyasn1/pyasn1"},{"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","modified":"2026-09-10T03:51:11.103855167Z","url":"https://github.com/pyasn1/pyasn1"}]},{"url":"https://osv.dev/vulnerability/PYSEC-2026-3456","tags":["ADVISORY"],"source":"pysec","sourceId":"PYSEC-2026-3456","modified":"2026-07-22T11:00:08.814095424Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-3456","url":"https://osv.dev/vulnerability/PYSEC-2026-3456"},{"source":"pysec","sourceId":"PYSEC-2026-3456","modified":"2026-07-22T11:00:08.814095424Z","url":"https://osv.dev/vulnerability/PYSEC-2026-3456"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59885","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-59885"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500380","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500380"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-59885","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-59885"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:50319","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:50319"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:62336","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:62336"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:87410","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:87410"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84734","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84734"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:60520","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:60520"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:53520","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:53520"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:48933","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:48933"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:50931","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:50931"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:50336","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:50336"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:59518","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:59518"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:83121","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:83121"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:62335","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:62335"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:40236","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:40236"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:56347","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:56347"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:65126","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:65126"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:73987","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:73987"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:77532","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:77532"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:52968","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:52968"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:70267","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:70267"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:69255","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:69255"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:54395","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://access.redhat.com/errata/RHSA-2026:54395"}]},{"source":"euvd","sourceId":"EUVD-2026-43955","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43955","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-43955","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43955"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","url":"https://osv.dev/vulnerability/GHSA-8ppf-4f7h-5ppj","ecosystem":"PyPI","name":"pyasn1","purl":"pkg:pypi/pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.4"}]}],"versions":["0.0.10a","0.0.11a","0.0.12a","0.0.13","0.0.13a","0.0.13b","0.0.6a","0.0.9a","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.1.8","0.1.9","0.2.1","0.2.2","0.2.3","0.3.1","0.3.2","0.3.3","0.3.4","0.3.5","0.3.6","0.3.7","0.4.1","0.4.2","0.4.3","0.4.4","0.4.5","0.4.6","0.4.7","0.4.8","0.5.0","0.5.1","0.6.0","0.6.1","0.6.2","0.6.3"],"databaseSpecific":{"last_known_affected_version_range":"<= 0.6.3","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-8ppf-4f7h-5ppj/GHSA-8ppf-4f7h-5ppj.json"},"modified":"2026-09-10T03:51:11.103855167Z","origins":[{"source":"ghsa","sourceId":"GHSA-8ppf-4f7h-5ppj","modified":"2026-09-10T03:51:11.103855167Z","url":"https://osv.dev/vulnerability/GHSA-8ppf-4f7h-5ppj"}]},{"source":"pysec","sourceId":"PYSEC-2026-3456","url":"https://osv.dev/vulnerability/PYSEC-2026-3456","ecosystem":"PyPI","name":"pyasn1","purl":"pkg:pypi/pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.4"}]}],"versions":["0.0.10a","0.0.11a","0.0.12a","0.0.13","0.0.13a","0.0.13b","0.0.6a","0.0.9a","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.1.8","0.1.9","0.2.1","0.2.2","0.2.3","0.3.1","0.3.2","0.3.3","0.3.4","0.3.5","0.3.6","0.3.7","0.4.1","0.4.2","0.4.3","0.4.4","0.4.5","0.4.6","0.4.7","0.4.8","0.5.0","0.5.1","0.6.0","0.6.1","0.6.2","0.6.3"],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/pyasn1/PYSEC-2026-3456.yaml"},"modified":"2026-07-22T11:00:08.814095424Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-3456","modified":"2026-07-22T11:00:08.814095424Z","url":"https://osv.dev/vulnerability/PYSEC-2026-3456"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"8Base-Ansible-Automation-Platform-2.5:python3.12-pyasn1-0:0.6.4-1.el8ap.noarch","product":"python3.12-pyasn1-0:0.6.4-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, refer to Ansible Automation Platform documentation.","url":"https://access.redhat.com/errata/RHSA-2026:50319"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."}],"purl":"pkg:rpm/redhat/python3.12-pyasn1@0.6.4-1.el8ap?arch=noarch","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64","product":"registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849_arm64 as a component of Red Hat Enterprise Linux AI 3.3","status":"fixed","remediations":[{"category":"vendor_fix","details":"The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the \"podman pull\" command.\n\nFor details on deploying and configuring RHEL AI, see the Red Hat Enterprise Linux AI documentation at https://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.3","url":"https://access.redhat.com/errata/RHSA-2026:62336"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."}],"purl":"pkg:oci/bootc-cuda-rhel9@sha256%3A5f4fc4b62366cd6599d914e31b51a35f7072ea4f5aaae077769b69a0c4cde849?arch=arm64&repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9&tag=1788260684","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:78ef44a2ed8bb9ace068af64e10eeaddfb8d4e9826bea5554ef46ac2a5c9ad73_arm64","product":"registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:78ef44a2ed8bb9ace068af64e10eeaddfb8d4e9826bea5554ef46ac2a5c9ad73_arm64 as a component of Red Hat OpenShift AI 2.25","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 2.25.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:87410"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."}],"purl":"pkg:oci/odh-feature-server-rhel9@sha256%3A78ef44a2ed8bb9ace068af64e10eeaddfb8d4e9826bea5554ef46ac2a5c9ad73?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-feature-server-rhel9&tag=1792148523","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:5df7d7c98f80be61f6b0b0adf11069494eea29c88387ed8b46538bf258dfb5a5_ppc64le","product":"registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:5df7d7c98f80be61f6b0b0adf11069494eea29c88387ed8b46538bf258dfb5a5_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."}],"purl":"pkg:oci/odh-feature-server-rhel9@sha256%3A5df7d7c98f80be61f6b0b0adf11069494eea29c88387ed8b46538bf258dfb5a5?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-feature-server-rhel9&tag=1791863220","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-mlflow-rhel9@sha256:4e1d4dc5b792364e2cfb31cd20e184c01aeff4ae0fa55dfc3d68aafb2a50a7f5_arm64","product":"registry.redhat.io/rhoai/odh-mlflow-rhel9@sha256:4e1d4dc5b792364e2cfb31cd20e184c01aeff4ae0fa55dfc3d68aafb2a50a7f5_arm64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."}],"purl":"pkg:oci/odh-mlflow-rhel9@sha256%3A4e1d4dc5b792364e2cfb31cd20e184c01aeff4ae0fa55dfc3d68aafb2a50a7f5?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9&tag=1787226790","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:15f5d799d1ba9318a757445ce94b84b7855b7c6ce37c46e199cac9d8eacf41a2_arm64","product":"registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:15f5d799d1ba9318a757445ce94b84b7855b7c6ce37c46e199cac9d8eacf41a2_arm64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."}],"purl":"pkg:oci/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256%3A15f5d799d1ba9318a757445ce94b84b7855b7c6ce37c46e199cac9d8eacf41a2?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9&tag=1787073451","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:aa9d828b90312ab56e9b68a70c39255817a9357c17cfcdbc56fe85d726635261_arm64","product":"registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:aa9d828b90312ab56e9b68a70c39255817a9357c17cfcdbc56fe85d726635261_arm64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."}],"purl":"pkg:oci/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256%3Aaa9d828b90312ab56e9b68a70c39255817a9357c17cfcdbc56fe85d726635261?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9&tag=1791785804","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256:e15a412f74c1a63d3228cf473766769cc25245c29f84f189b82998fea7ed0524_amd64","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256:e15a412f74c1a63d3228cf473766769cc25245c29f84f189b82998fea7ed0524_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."}],"purl":"pkg:oci/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256%3Ae15a412f74c1a63d3228cf473766769cc25245c29f84f189b82998fea7ed0524?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9&tag=1787073546","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat Quay 3.10:registry.redhat.io/quay/quay-rhel8@sha256:967c0ce73afdafe4fe21dc196bc938864b437f6a3c3af99b8247abfe4535b395_amd64","product":"registry.redhat.io/quay/quay-rhel8@sha256:967c0ce73afdafe4fe21dc196bc938864b437f6a3c3af99b8247abfe4535b395_amd64 as a component of Red Hat Quay 3.10","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:53520"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."}],"purl":"pkg:oci/quay-rhel8@sha256%3A967c0ce73afdafe4fe21dc196bc938864b437f6a3c3af99b8247abfe4535b395?arch=amd64&repository_url=registry.redhat.io/quay/quay-rhel8&tag=1786395065","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:bdfd5823d00ece5e608428350741629d132351a6789cdd042d07dbb4fd1f11a6_s390x","product":"registry.redhat.io/quay/quay-rhel8@sha256:bdfd5823d00ece5e608428350741629d132351a6789cdd042d07dbb4fd1f11a6_s390x as a component of Red Hat Quay 3.15","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:48933"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."}],"purl":"pkg:oci/quay-rhel8@sha256%3Abdfd5823d00ece5e608428350741629d132351a6789cdd042d07dbb4fd1f11a6?arch=s390x&repository_url=registry.redhat.io/quay/quay-rhel8&tag=1785261506","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat Quay 3.9:registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x","product":"registry.redhat.io/quay/quay-rhel8@sha256:f6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883_s390x as a component of Red Hat Quay 3.9","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:50931"},{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."}],"purl":"pkg:oci/quay-rhel8@sha256%3Af6cfbe5b8c58d6dbbddc1a809643ffe95f0e54a1a1571bde6748bd2664bb8883?arch=s390x&repository_url=registry.redhat.io/quay/quay-rhel8&tag=1785950004","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"exploit_intelligence:exploit-intelligence-tech-preview/vulnerability-analysis-rhel9","product":"exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/vulnerability-analysis-rhel9?repository_url=registry.redhat.io/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"openshift_service_mesh_3:openshift-service-mesh/kiali-rhel9-operator","product":"openshift-service-mesh/kiali-rhel9-operator as a component of OpenShift Service Mesh 3","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/kiali-rhel9-operator?repository_url=registry.redhat.io/openshift-service-mesh/kiali-rhel9-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform-25/ee-supported-rhel8","product":"ansible-automation-platform-25/ee-supported-rhel8 as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ee-supported-rhel8?repository_url=registry.redhat.io/ansible-automation-platform-25/ee-supported-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform-26/gateway-rhel9-operator","product":"ansible-automation-platform-26/gateway-rhel9-operator as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/gateway-rhel9-operator?repository_url=registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform-27/eda-controller-rhel9","product":"ansible-automation-platform-27/eda-controller-rhel9 as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/eda-controller-rhel9?repository_url=registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform-27/lightspeed-rhel9-operator","product":"ansible-automation-platform-27/lightspeed-rhel9-operator as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/lightspeed-rhel9-operator?repository_url=registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"red_hat_enterprise_linux_10:python3-pyasn1-modules","product":"python3-pyasn1-modules as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/python3-pyasn1-modules","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"red_hat_enterprise_linux_7:resource-agents-sap","product":"resource-agents-sap as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/resource-agents-sap","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"red_hat_enterprise_linux_9:python3-pyasn1","product":"python3-pyasn1 as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/python3-pyasn1","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"red_hat_openstack_platform_16.2:python-pyasn1.src","product":"python-pyasn1.src as a component of Red Hat OpenStack Platform 16.2","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/python-pyasn1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"red_hat_trusted_artifact_signer:rhtas/segment-reporting-rhel9","product":"rhtas/segment-reporting-rhel9 as a component of Red Hat Trusted Artifact Signer","status":"known_affected","remediations":[{"category":"workaround","details":"Update to pyasn1 version 0.6.4 or later when available for your product stream. The impact is limited to availability (denial of service) — an attacker cannot access or modify data. Applications that do not process untrusted ASN.1 input are at reduced risk."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/segment-reporting-rhel9?repository_url=registry.redhat.io/rhtas/segment-reporting-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"10Base-Ansible-Automation-Platform-2.6-Developer-1.3:ansible-dev-tools+server-0:26.7.2-1.el10ap.noarch","product":"ansible-dev-tools+server-0:26.7.2-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/ansible-dev-tools%2Bserver@26.7.2-1.el10ap?arch=noarch","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.66-1.el9ap.src","product":"python3.12-pulpcore-0:3.49.66-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/python3.12-pulpcore@3.49.66-1.el9ap?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:8eae9b630b66b4265022a1899df60ae1276d51d778b331b98e2bbbc967b2efe6_ppc64le","product":"registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:8eae9b630b66b4265022a1899df60ae1276d51d778b331b98e2bbbc967b2efe6_ppc64le as a component of Red Hat OpenShift AI 2.25","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-data-science-pipelines-argo-argoexec-rhel9@sha256%3A8eae9b630b66b4265022a1899df60ae1276d51d778b331b98e2bbbc967b2efe6?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9&tag=1788181065","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat OpenShift AI 2.25:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:8d449a4feeaf74349e57e2804c164e38b814c021d5129cccbc6fdb7c8d8ccfe9_amd64","product":"registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:8d449a4feeaf74349e57e2804c164e38b814c021d5129cccbc6fdb7c8d8ccfe9_amd64 as a component of Red Hat OpenShift AI 2.25","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-model-registry-rhel9@sha256%3A8d449a4feeaf74349e57e2804c164e38b814c021d5129cccbc6fdb7c8d8ccfe9?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-model-registry-rhel9&tag=1788316737","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat OpenShift AI 3.3:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:f80e5470a30f091bd1903062b972a90176833784c7f00335580cf3d63c1a3673_arm64","product":"registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:f80e5470a30f091bd1903062b972a90176833784c7f00335580cf3d63c1a3673_arm64 as a component of Red Hat OpenShift AI 3.3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-data-science-pipelines-argo-argoexec-rhel9@sha256%3Af80e5470a30f091bd1903062b972a90176833784c7f00335580cf3d63c1a3673?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9&tag=1790132012","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat OpenShift AI 3.3:registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:8f46c12c1d0469bd16d0a076778c419910203849819401d85aac6d126c925c03_ppc64le","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:8f46c12c1d0469bd16d0a076778c419910203849819401d85aac6d126c925c03_ppc64le as a component of Red Hat OpenShift AI 3.3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256%3A8f46c12c1d0469bd16d0a076778c419910203849819401d85aac6d126c925c03?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9&tag=1790331087","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-llm-d-batch-gateway-apiserver-rhel9@sha256:7824386a14d96de5dad37d80e3662a029ab528cd6b7210a7a80a897c70fd7e21_arm64","product":"registry.redhat.io/rhoai/odh-llm-d-batch-gateway-apiserver-rhel9@sha256:7824386a14d96de5dad37d80e3662a029ab528cd6b7210a7a80a897c70fd7e21_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-llm-d-batch-gateway-apiserver-rhel9@sha256%3A7824386a14d96de5dad37d80e3662a029ab528cd6b7210a7a80a897c70fd7e21?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-llm-d-batch-gateway-apiserver-rhel9&tag=1786630755","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:5c99b9f356df625462c2c92b29d1c12a1f4870d0d5b9d66d9f815e136f4e4812_arm64","product":"registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:5c99b9f356df625462c2c92b29d1c12a1f4870d0d5b9d66d9f815e136f4e4812_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-model-registry-operator-rhel9@sha256%3A5c99b9f356df625462c2c92b29d1c12a1f4870d0d5b9d66d9f815e136f4e4812?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-model-registry-operator-rhel9&tag=1787103216","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9@sha256:3fc5100f548f5d3ff1b071045803247067374b17dfa249ccafece7789f8f8f03_arm64","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9@sha256:3fc5100f548f5d3ff1b071045803247067374b17dfa249ccafece7789f8f8f03_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-workbench-jupyter-minimal-cuda-py312-rhel9@sha256%3A3fc5100f548f5d3ff1b071045803247067374b17dfa249ccafece7789f8f8f03?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9&tag=1787074078","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]},{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json","productId":"service_telemetry_framework_1.5:stf/smart-gateway-rhel9-operator","product":"stf/smart-gateway-rhel9-operator as a component of Service Telemetry Framework 1.5","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_cannot_be_controlled_by_adversary","purl":"pkg:oci/smart-gateway-rhel9-operator?repository_url=registry.redhat.io/stf/smart-gateway-rhel9-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-59885","modified":"2026-10-22T05:16:18+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json"}]}],"vendorCoverage":{"total":1964,"shown":32,"omitted":1932,"source":"redhat"}}