{"document":{"aggregate_severity":{"namespace":"https://access.redhat.com/security/updates/classification/","text":"Moderate"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright © Red Hat, Inc. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"legal_disclaimer","text":"This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.","title":"Terms of Use"}],"publisher":{"category":"vendor","contact_details":"https://access.redhat.com/security/team/contact/","issuing_authority":"Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.","name":"Red Hat Product Security","namespace":"https://www.redhat.com"},"references":[{"category":"self","summary":"Canonical URL","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24400.json"}],"title":"assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE)","tracking":{"current_release_date":"2026-08-26T12:07:17+00:00","generator":{"date":"2026-08-26T12:07:17+00:00","engine":{"name":"Red Hat SDEngine","version":"5.3.16"}},"id":"CVE-2026-24400","initial_release_date":"2026-01-26T22:19:02.161000+00:00","revision_history":[{"date":"2026-01-26T22:19:02.161000+00:00","number":"1","summary":"Initial version"},{"date":"2026-07-14T08:38:03+00:00","number":"2","summary":"Current version"},{"date":"2026-08-26T12:07:17+00:00","number":"3","summary":"Last generated version"}],"status":"final","version":"3"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"OpenShift Serverless","product":{"name":"OpenShift Serverless","product_id":"openshift_serverless","product_identification_helper":{"cpe":"cpe:/a:redhat:serverless:1"}}}],"category":"product_family","name":"OpenShift Serverless"},{"branches":[{"category":"product_name","name":"Red Hat AMQ Broker 7","product":{"name":"Red Hat AMQ Broker 7","product_id":"red_hat_amq_broker_7","product_identification_helper":{"cpe":"cpe:/a:redhat:amq_broker:7"}}}],"category":"product_family","name":"Red Hat AMQ Broker 7"},{"branches":[{"category":"product_name","name":"Red Hat AMQ Clients","product":{"name":"Red Hat AMQ Clients","product_id":"red_hat_amq_clients","product_identification_helper":{"cpe":"cpe:/a:redhat:amq_clients:2023"}}}],"category":"product_family","name":"Red Hat AMQ Clients"},{"branches":[{"category":"product_name","name":"Red Hat build of Apache Camel 4 for Quarkus 3","product":{"name":"Red Hat build of Apache Camel 4 for Quarkus 3","product_id":"red_hat_build_of_apache_camel_4_for_quarkus_3","product_identification_helper":{"cpe":"cpe:/a:redhat:camel_quarkus:3"}}}],"category":"product_family","name":"Red Hat build of Apache Camel 4 for Quarkus 3"},{"branches":[{"category":"product_name","name":"Red Hat build of Apache Camel - HawtIO 4","product":{"name":"Red Hat build of Apache Camel - HawtIO 4","product_id":"red_hat_build_of_apache_camel_-_hawtio_4","product_identification_helper":{"cpe":"cpe:/a:redhat:apache_camel_hawtio:4"}}}],"category":"product_family","name":"Red Hat build of Apache Camel - HawtIO 4"},{"branches":[{"category":"product_name","name":"Red Hat build of Apicurio Registry 3","product":{"name":"Red Hat build of Apicurio Registry 3","product_id":"red_hat_build_of_apicurio_registry_3","product_identification_helper":{"cpe":"cpe:/a:redhat:apicurio_registry:3"}}}],"category":"product_family","name":"Red Hat build of Apicurio Registry 3"},{"branches":[{"category":"product_name","name":"Red Hat build of Debezium 2","product":{"name":"Red Hat build of Debezium 2","product_id":"red_hat_build_of_debezium_2","product_identification_helper":{"cpe":"cpe:/a:redhat:debezium:2"}}}],"category":"product_family","name":"Red Hat build of Debezium 2"},{"branches":[{"category":"product_name","name":"Red Hat build of Debezium 3","product":{"name":"Red Hat build of Debezium 3","product_id":"red_hat_build_of_debezium_3","product_identification_helper":{"cpe":"cpe:/a:redhat:debezium:3"}}}],"category":"product_family","name":"Red Hat build of Debezium 3"},{"branches":[{"category":"product_name","name":"Red Hat build of OptaPlanner 8","product":{"name":"Red Hat build of OptaPlanner 8","product_id":"red_hat_build_of_optaplanner_8","product_identification_helper":{"cpe":"cpe:/a:redhat:optaplanner:::el6"}}}],"category":"product_family","name":"Red Hat build of OptaPlanner 8"},{"branches":[{"category":"product_name","name":"Red Hat Data Grid 8","product":{"name":"Red Hat Data Grid 8","product_id":"red_hat_data_grid_8","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_data_grid:8"}}}],"category":"product_family","name":"Red Hat Data Grid 8"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 10","product":{"name":"Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:10"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 10"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 8","product":{"name":"Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:8"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 8"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 9","product":{"name":"Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:9"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 9"},{"branches":[{"category":"product_name","name":"Red Hat Fuse 7","product":{"name":"Red Hat Fuse 7","product_id":"red_hat_fuse_7","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_fuse:7"}}}],"category":"product_family","name":"Red Hat Fuse 7"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Enterprise Application Platform 7","product":{"name":"Red Hat JBoss Enterprise Application Platform 7","product_id":"red_hat_jboss_enterprise_application_platform_7","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_enterprise_application_platform:7"}}}],"category":"product_family","name":"Red Hat JBoss Enterprise Application Platform 7"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Enterprise Application Platform 8","product":{"name":"Red Hat JBoss Enterprise Application Platform 8","product_id":"red_hat_jboss_enterprise_application_platform_8","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_enterprise_application_platform:8"}}}],"category":"product_family","name":"Red Hat JBoss Enterprise Application Platform 8"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Enterprise Application Platform Expansion Pack","product":{"name":"Red Hat JBoss Enterprise Application Platform Expansion Pack","product_id":"red_hat_jboss_enterprise_application_platform_expansion_pack","product_identification_helper":{"cpe":"cpe:/a:redhat:jbosseapxp"}}}],"category":"product_family","name":"Red Hat JBoss Enterprise Application Platform Expansion Pack"},{"branches":[{"category":"product_name","name":"Red Hat OpenShift AI (RHOAI)","product":{"name":"Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai)","product_identification_helper":{"cpe":"cpe:/a:redhat:openshift_ai"}}}],"category":"product_family","name":"Red Hat OpenShift AI (RHOAI)"},{"branches":[{"category":"product_name","name":"Red Hat OpenShift Dev Spaces","product":{"name":"Red Hat OpenShift Dev Spaces","product_id":"red_hat_openshift_dev_spaces","product_identification_helper":{"cpe":"cpe:/a:redhat:openshift_devspaces:3"}}}],"category":"product_family","name":"Red Hat OpenShift Dev Spaces"},{"branches":[{"category":"product_name","name":"Red Hat Process Automation 7","product":{"name":"Red Hat Process Automation 7","product_id":"red_hat_process_automation_7","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_enterprise_bpms_platform:7"}}}],"category":"product_family","name":"Red Hat Process Automation 7"},{"branches":[{"category":"product_name","name":"Red Hat Single Sign-On 7","product":{"name":"Red Hat Single Sign-On 7","product_id":"red_hat_single_sign-on_7","product_identification_helper":{"cpe":"cpe:/a:redhat:red_hat_single_sign_on:7"}}}],"category":"product_family","name":"Red Hat Single Sign-On 7"},{"branches":[{"category":"product_name","name":"streams for Apache Kafka 2","product":{"name":"streams for Apache Kafka 2","product_id":"streams_for_apache_kafka_2","product_identification_helper":{"cpe":"cpe:/a:redhat:amq_streams:2"}}}],"category":"product_family","name":"streams for Apache Kafka 2"},{"branches":[{"category":"product_name","name":"streams for Apache Kafka 3","product":{"name":"streams for Apache Kafka 3","product_id":"streams_for_apache_kafka_3","product_identification_helper":{"cpe":"cpe:/a:redhat:amq_streams:3"}}}],"category":"product_family","name":"streams for Apache Kafka 3"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux AppStream (v. 9)","product":{"name":"Red Hat Enterprise Linux AppStream (v. 9)","product_id":"AppStream-9.8.0.Z.MAIN.EUS","product_identification_helper":{"cpe":"cpe:/a:redhat:enterprise_linux:9::appstream"}}},{"category":"product_name","name":"Red Hat Enterprise Linux AppStream (v. 10)","product":{"name":"Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.2.Z","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:10.2"}}},{"category":"product_name","name":"Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","product":{"name":"Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","product_id":"CRB-10.2.Z","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:10.2"}}},{"category":"product_name","name":"Red Hat Enterprise Linux AppStream E4S (v.9.4)","product":{"name":"Red Hat Enterprise Linux AppStream E4S (v.9.4)","product_id":"AppStream-9.4.0.Z.E4S","product_identification_helper":{"cpe":"cpe:/a:redhat:rhel_e4s:9.4::appstream"}}},{"category":"product_name","name":"Red Hat Enterprise Linux AppStream EUS (v.9.6)","product":{"name":"Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS","product_identification_helper":{"cpe":"cpe:/a:redhat:rhel_eus:9.6::appstream"}}},{"category":"product_name","name":"Red Hat Enterprise Linux AppStream E4S (v.9.2)","product":{"name":"Red Hat Enterprise Linux AppStream E4S (v.9.2)","product_id":"AppStream-9.2.0.Z.E4S","product_identification_helper":{"cpe":"cpe:/a:redhat:rhel_e4s:9.2::appstream"}}}],"category":"product_family","name":"Red Hat Enterprise Linux"},{"branches":[{"category":"product_name","name":"Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16","product":{"name":"Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16","product_id":"Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16","product_identification_helper":{"cpe":"cpe:/a:redhat:apache_camel_spring_boot:4.18"}}}],"category":"product_family","name":"Red Hat Build of Apache Camel"},{"category":"product_version","name":"openshift-serverless-1/kn-ekb-dispatcher-rhel9","product":{"name":"openshift-serverless-1/kn-ekb-dispatcher-rhel9","product_id":"openshift-serverless-1/kn-ekb-dispatcher-rhel9","product_identification_helper":{"purl":"pkg:oci/kn-ekb-dispatcher-rhel9?repository_url=registry.redhat.io/openshift-serverless-1/kn-ekb-dispatcher-rhel9"}}},{"category":"product_version","name":"openshift-serverless-1/kn-ekb-receiver-rhel9","product":{"name":"openshift-serverless-1/kn-ekb-receiver-rhel9","product_id":"openshift-serverless-1/kn-ekb-receiver-rhel9","product_identification_helper":{"purl":"pkg:oci/kn-ekb-receiver-rhel9?repository_url=registry.redhat.io/openshift-serverless-1/kn-ekb-receiver-rhel9"}}},{"category":"product_version","name":"assertj-core","product":{"name":"assertj-core","product_id":"assertj-core","product_identification_helper":{"purl":"pkg:maven/org.assertj/assertj-core"}}},{"category":"product_version","name":"moditect-javadoc","product":{"name":"moditect-javadoc","product_id":"moditect-javadoc","product_identification_helper":{"purl":"pkg:rpm/redhat/moditect-javadoc"}}},{"category":"product_version","name":"moditect.src","product":{"name":"moditect.src","product_id":"moditect.src","product_identification_helper":{"purl":"pkg:rpm/redhat/moditect?arch=src"}}},{"category":"product_version","name":"assertj-core::javapackages-tools:201801","product":{"name":"assertj-core (javapackages-tools:201801)","product_id":"assertj-core::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/assertj-core?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"assertj-core.src::javapackages-tools:201801","product":{"name":"assertj-core.src (javapackages-tools:201801)","product_id":"assertj-core.src::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/assertj-core?arch=src&rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"assertj-core-javadoc::javapackages-tools:201801","product":{"name":"assertj-core-javadoc (javapackages-tools:201801)","product_id":"assertj-core-javadoc::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/assertj-core-javadoc?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"maven-surefire-provider-junit::javapackages-tools:201801","product":{"name":"maven-surefire-provider-junit (javapackages-tools:201801)","product_id":"maven-surefire-provider-junit::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/maven-surefire-provider-junit?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"maven-surefire-provider-testng::javapackages-tools:201801","product":{"name":"maven-surefire-provider-testng (javapackages-tools:201801)","product_id":"maven-surefire-provider-testng::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/maven-surefire-provider-testng?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"maven-failsafe-plugin::javapackages-tools:201801","product":{"name":"maven-failsafe-plugin (javapackages-tools:201801)","product_id":"maven-failsafe-plugin::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/maven-failsafe-plugin?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"maven-surefire-plugin::javapackages-tools:201801","product":{"name":"maven-surefire-plugin (javapackages-tools:201801)","product_id":"maven-surefire-plugin::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/maven-surefire-plugin?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"maven-surefire-report-parser::javapackages-tools:201801","product":{"name":"maven-surefire-report-parser (javapackages-tools:201801)","product_id":"maven-surefire-report-parser::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/maven-surefire-report-parser?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"maven-surefire-report-plugin::javapackages-tools:201801","product":{"name":"maven-surefire-report-plugin (javapackages-tools:201801)","product_id":"maven-surefire-report-plugin::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/maven-surefire-report-plugin?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"maven-surefire.src::javapackages-tools:201801","product":{"name":"maven-surefire.src (javapackages-tools:201801)","product_id":"maven-surefire.src::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/maven-surefire?arch=src&rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"maven-surefire-javadoc::javapackages-tools:201801","product":{"name":"maven-surefire-javadoc (javapackages-tools:201801)","product_id":"maven-surefire-javadoc::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/maven-surefire-javadoc?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"maven-surefire::javapackages-tools:201801","product":{"name":"maven-surefire (javapackages-tools:201801)","product_id":"maven-surefire::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/maven-surefire?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"powermock-testng::javapackages-tools:201801","product":{"name":"powermock-testng (javapackages-tools:201801)","product_id":"powermock-testng::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/powermock-testng?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"powermock-api-easymock::javapackages-tools:201801","product":{"name":"powermock-api-easymock (javapackages-tools:201801)","product_id":"powermock-api-easymock::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/powermock-api-easymock?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"powermock-common::javapackages-tools:201801","product":{"name":"powermock-common (javapackages-tools:201801)","product_id":"powermock-common::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/powermock-common?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"powermock.src::javapackages-tools:201801","product":{"name":"powermock.src (javapackages-tools:201801)","product_id":"powermock.src::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/powermock?arch=src&rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"powermock-reflect::javapackages-tools:201801","product":{"name":"powermock-reflect (javapackages-tools:201801)","product_id":"powermock-reflect::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/powermock-reflect?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"powermock-javadoc::javapackages-tools:201801","product":{"name":"powermock-javadoc (javapackages-tools:201801)","product_id":"powermock-javadoc::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/powermock-javadoc?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"powermock-api-mockito::javapackages-tools:201801","product":{"name":"powermock-api-mockito (javapackages-tools:201801)","product_id":"powermock-api-mockito::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/powermock-api-mockito?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"powermock-core::javapackages-tools:201801","product":{"name":"powermock-core (javapackages-tools:201801)","product_id":"powermock-core::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/powermock-core?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"powermock-junit4::javapackages-tools:201801","product":{"name":"powermock-junit4 (javapackages-tools:201801)","product_id":"powermock-junit4::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/powermock-junit4?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"powermock-api-support::javapackages-tools:201801","product":{"name":"powermock-api-support (javapackages-tools:201801)","product_id":"powermock-api-support::javapackages-tools:201801","product_identification_helper":{"purl":"pkg:rpm/redhat/powermock-api-support?rpmmod=javapackages-tools:201801"}}},{"category":"product_version","name":"log4j","product":{"name":"log4j","product_id":"log4j","product_identification_helper":{"purl":"pkg:rpm/redhat/log4j?rpmmod=log4j:2"}}},{"category":"product_version","name":"log4j-jcl","product":{"name":"log4j-jcl","product_id":"log4j-jcl","product_identification_helper":{"purl":"pkg:rpm/redhat/log4j-jcl?rpmmod=log4j:2"}}},{"category":"product_version","name":"log4j-slf4j","product":{"name":"log4j-slf4j","product_id":"log4j-slf4j","product_identification_helper":{"purl":"pkg:rpm/redhat/log4j-slf4j?rpmmod=log4j:2"}}},{"category":"product_version","name":"log4j-web","product":{"name":"log4j-web","product_id":"log4j-web","product_identification_helper":{"purl":"pkg:rpm/redhat/log4j-web?rpmmod=log4j:2"}}},{"category":"product_version","name":"log4j.src","product":{"name":"log4j.src","product_id":"log4j.src","product_identification_helper":{"purl":"pkg:rpm/redhat/log4j?arch=src"}}},{"category":"product_version","name":"maven-enforcer-api","product":{"name":"maven-enforcer-api","product_id":"maven-enforcer-api","product_identification_helper":{"purl":"pkg:rpm/redhat/maven-enforcer-api"}}},{"category":"product_version","name":"maven-enforcer-plugin","product":{"name":"maven-enforcer-plugin","product_id":"maven-enforcer-plugin","product_identification_helper":{"purl":"pkg:rpm/redhat/maven-enforcer-plugin"}}},{"category":"product_version","name":"maven-enforcer-rules","product":{"name":"maven-enforcer-rules","product_id":"maven-enforcer-rules","product_identification_helper":{"purl":"pkg:rpm/redhat/maven-enforcer-rules"}}},{"category":"product_version","name":"rhoai/odh-trustyai-service-rhel8","product":{"name":"rhoai/odh-trustyai-service-rhel8","product_id":"rhoai/odh-trustyai-service-rhel8","product_identification_helper":{"purl":"pkg:oci/odh-trustyai-service-rhel8?repository_url=registry.redhat.io/rhoai/odh-trustyai-service-rhel8"}}},{"category":"product_version","name":"rhoai/odh-trustyai-service-rhel9","product":{"name":"rhoai/odh-trustyai-service-rhel9","product_id":"rhoai/odh-trustyai-service-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-trustyai-service-rhel9?repository_url=registry.redhat.io/rhoai/odh-trustyai-service-rhel9"}}},{"category":"product_version","name":"devspaces/dashboard-rhel9","product":{"name":"devspaces/dashboard-rhel9","product_id":"devspaces/dashboard-rhel9","product_identification_helper":{"purl":"pkg:oci/dashboard-rhel9?repository_url=registry.redhat.io/devspaces/dashboard-rhel9"}}},{"category":"product_version","name":"devspaces/devspaces-operator-bundle","product":{"name":"devspaces/devspaces-operator-bundle","product_id":"devspaces/devspaces-operator-bundle","product_identification_helper":{"purl":"pkg:oci/devspaces-operator-bundle?repository_url=registry.redhat.io/devspaces/devspaces-operator-bundle"}}},{"category":"product_version","name":"devspaces/udi-base-rhel10","product":{"name":"devspaces/udi-base-rhel10","product_id":"devspaces/udi-base-rhel10","product_identification_helper":{"purl":"pkg:oci/udi-base-rhel10?repository_url=registry.redhat.io/devspaces/udi-base-rhel10"}}},{"category":"product_version","name":"devspaces/udi-base-rhel9","product":{"name":"devspaces/udi-base-rhel9","product_id":"devspaces/udi-base-rhel9","product_identification_helper":{"purl":"pkg:oci/udi-base-rhel9?repository_url=registry.redhat.io/devspaces/udi-base-rhel9"}}},{"category":"product_version","name":"devspaces/udi-rhel9","product":{"name":"devspaces/udi-rhel9","product_id":"devspaces/udi-rhel9","product_identification_helper":{"purl":"pkg:oci/udi-rhel9?repository_url=registry.redhat.io/devspaces/udi-rhel9"}}},{"category":"product_version","name":"rocksdbjni.src","product":{"name":"rocksdbjni.src","product_id":"rocksdbjni.src","product_identification_helper":{"purl":"pkg:rpm/redhat/rocksdbjni?arch=src"}}},{"branches":[{"category":"product_version","name":"assertj-core-0:3.19.0-9.el9_8.1.noarch","product":{"name":"assertj-core-0:3.19.0-9.el9_8.1.noarch","product_id":"assertj-core-0:3.19.0-9.el9_8.1.noarch","product_identification_helper":{"purl":"pkg:rpm/redhat/assertj-core@3.19.0-9.el9_8.1?arch=noarch"}}},{"category":"product_version","name":"assertj-core-0:3.24.2-9.el10_2.1.noarch","product":{"name":"assertj-core-0:3.24.2-9.el10_2.1.noarch","product_id":"assertj-core-0:3.24.2-9.el10_2.1.noarch","product_identification_helper":{"purl":"pkg:rpm/redhat/assertj-core@3.24.2-9.el10_2.1?arch=noarch"}}},{"category":"product_version","name":"assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch","product":{"name":"assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch","product_id":"assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch","product_identification_helper":{"purl":"pkg:rpm/redhat/assertj-core-javadoc@3.24.2-9.el10_2.1?arch=noarch"}}},{"category":"product_version","name":"assertj-core-0:3.19.0-5.el9_4.2.noarch","product":{"name":"assertj-core-0:3.19.0-5.el9_4.2.noarch","product_id":"assertj-core-0:3.19.0-5.el9_4.2.noarch","product_identification_helper":{"purl":"pkg:rpm/redhat/assertj-core@3.19.0-5.el9_4.2?arch=noarch"}}},{"category":"product_version","name":"assertj-core-0:3.19.0-9.el9_6.1.noarch","product":{"name":"assertj-core-0:3.19.0-9.el9_6.1.noarch","product_id":"assertj-core-0:3.19.0-9.el9_6.1.noarch","product_identification_helper":{"purl":"pkg:rpm/redhat/assertj-core@3.19.0-9.el9_6.1?arch=noarch"}}},{"category":"product_version","name":"assertj-core-0:3.19.0-5.el9_2.2.noarch","product":{"name":"assertj-core-0:3.19.0-5.el9_2.2.noarch","product_id":"assertj-core-0:3.19.0-5.el9_2.2.noarch","product_identification_helper":{"purl":"pkg:rpm/redhat/assertj-core@3.19.0-5.el9_2.2?arch=noarch"}}}],"category":"architecture","name":"noarch"},{"branches":[{"category":"product_version","name":"assertj-core-0:3.19.0-9.el9_8.1.src","product":{"name":"assertj-core-0:3.19.0-9.el9_8.1.src","product_id":"assertj-core-0:3.19.0-9.el9_8.1.src","product_identification_helper":{"purl":"pkg:rpm/redhat/assertj-core@3.19.0-9.el9_8.1?arch=src"}}},{"category":"product_version","name":"assertj-core-0:3.24.2-9.el10_2.1.src","product":{"name":"assertj-core-0:3.24.2-9.el10_2.1.src","product_id":"assertj-core-0:3.24.2-9.el10_2.1.src","product_identification_helper":{"purl":"pkg:rpm/redhat/assertj-core@3.24.2-9.el10_2.1?arch=src"}}},{"category":"product_version","name":"assertj-core-0:3.19.0-5.el9_4.2.src","product":{"name":"assertj-core-0:3.19.0-5.el9_4.2.src","product_id":"assertj-core-0:3.19.0-5.el9_4.2.src","product_identification_helper":{"purl":"pkg:rpm/redhat/assertj-core@3.19.0-5.el9_4.2?arch=src"}}},{"category":"product_version","name":"assertj-core-0:3.19.0-9.el9_6.1.src","product":{"name":"assertj-core-0:3.19.0-9.el9_6.1.src","product_id":"assertj-core-0:3.19.0-9.el9_6.1.src","product_identification_helper":{"purl":"pkg:rpm/redhat/assertj-core@3.19.0-9.el9_6.1?arch=src"}}},{"category":"product_version","name":"assertj-core-0:3.19.0-5.el9_2.2.src","product":{"name":"assertj-core-0:3.19.0-5.el9_2.2.src","product_id":"assertj-core-0:3.19.0-5.el9_2.2.src","product_identification_helper":{"purl":"pkg:rpm/redhat/assertj-core@3.19.0-5.el9_2.2?arch=src"}}}],"category":"architecture","name":"src"}],"category":"vendor","name":"Red Hat"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"assertj-core-0:3.24.2-9.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.noarch"},"product_reference":"assertj-core-0:3.24.2-9.el10_2.1.noarch","relates_to_product_reference":"AppStream-10.2.Z"},{"category":"default_component_of","full_product_name":{"name":"assertj-core-0:3.24.2-9.el10_2.1.src as a component of Red Hat Enterprise Linux AppStream (v. 10)","product_id":"AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.src"},"product_reference":"assertj-core-0:3.24.2-9.el10_2.1.src","relates_to_product_reference":"AppStream-10.2.Z"},{"category":"default_component_of","full_product_name":{"name":"assertj-core-0:3.19.0-5.el9_2.2.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)","product_id":"AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.noarch"},"product_reference":"assertj-core-0:3.19.0-5.el9_2.2.noarch","relates_to_product_reference":"AppStream-9.2.0.Z.E4S"},{"category":"default_component_of","full_product_name":{"name":"assertj-core-0:3.19.0-5.el9_2.2.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)","product_id":"AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.src"},"product_reference":"assertj-core-0:3.19.0-5.el9_2.2.src","relates_to_product_reference":"AppStream-9.2.0.Z.E4S"},{"category":"default_component_of","full_product_name":{"name":"assertj-core-0:3.19.0-5.el9_4.2.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)","product_id":"AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.noarch"},"product_reference":"assertj-core-0:3.19.0-5.el9_4.2.noarch","relates_to_product_reference":"AppStream-9.4.0.Z.E4S"},{"category":"default_component_of","full_product_name":{"name":"assertj-core-0:3.19.0-5.el9_4.2.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)","product_id":"AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.src"},"product_reference":"assertj-core-0:3.19.0-5.el9_4.2.src","relates_to_product_reference":"AppStream-9.4.0.Z.E4S"},{"category":"default_component_of","full_product_name":{"name":"assertj-core-0:3.19.0-9.el9_6.1.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.noarch"},"product_reference":"assertj-core-0:3.19.0-9.el9_6.1.noarch","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"assertj-core-0:3.19.0-9.el9_6.1.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","product_id":"AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.src"},"product_reference":"assertj-core-0:3.19.0-9.el9_6.1.src","relates_to_product_reference":"AppStream-9.6.0.Z.EUS"},{"category":"default_component_of","full_product_name":{"name":"assertj-core-0:3.19.0-9.el9_8.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)","product_id":"AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.noarch"},"product_reference":"assertj-core-0:3.19.0-9.el9_8.1.noarch","relates_to_product_reference":"AppStream-9.8.0.Z.MAIN.EUS"},{"category":"default_component_of","full_product_name":{"name":"assertj-core-0:3.19.0-9.el9_8.1.src as a component of Red Hat Enterprise Linux AppStream (v. 9)","product_id":"AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.src"},"product_reference":"assertj-core-0:3.19.0-9.el9_8.1.src","relates_to_product_reference":"AppStream-9.8.0.Z.MAIN.EUS"},{"category":"default_component_of","full_product_name":{"name":"assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","product_id":"CRB-10.2.Z:assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch"},"product_reference":"assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch","relates_to_product_reference":"CRB-10.2.Z"},{"category":"default_component_of","full_product_name":{"name":"openshift-serverless-1/kn-ekb-dispatcher-rhel9 as a component of OpenShift Serverless","product_id":"openshift_serverless:openshift-serverless-1/kn-ekb-dispatcher-rhel9"},"product_reference":"openshift-serverless-1/kn-ekb-dispatcher-rhel9","relates_to_product_reference":"openshift_serverless"},{"category":"default_component_of","full_product_name":{"name":"openshift-serverless-1/kn-ekb-receiver-rhel9 as a component of OpenShift Serverless","product_id":"openshift_serverless:openshift-serverless-1/kn-ekb-receiver-rhel9"},"product_reference":"openshift-serverless-1/kn-ekb-receiver-rhel9","relates_to_product_reference":"openshift_serverless"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of Red Hat AMQ Broker 7","product_id":"red_hat_amq_broker_7:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"red_hat_amq_broker_7"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of Red Hat AMQ Clients","product_id":"red_hat_amq_clients:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"red_hat_amq_clients"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of Red Hat build of Apache Camel - HawtIO 4","product_id":"red_hat_build_of_apache_camel_-_hawtio_4:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"red_hat_build_of_apache_camel_-_hawtio_4"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of Red Hat build of Apache Camel 4 for Quarkus 3","product_id":"red_hat_build_of_apache_camel_4_for_quarkus_3:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"red_hat_build_of_apache_camel_4_for_quarkus_3"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of Red Hat build of Apicurio Registry 3","product_id":"red_hat_build_of_apicurio_registry_3:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"red_hat_build_of_apicurio_registry_3"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of Red Hat build of Debezium 2","product_id":"red_hat_build_of_debezium_2:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"red_hat_build_of_debezium_2"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of Red Hat build of Debezium 3","product_id":"red_hat_build_of_debezium_3:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"red_hat_build_of_debezium_3"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of Red Hat build of OptaPlanner 8","product_id":"red_hat_build_of_optaplanner_8:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"red_hat_build_of_optaplanner_8"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of Red Hat Data Grid 8","product_id":"red_hat_data_grid_8:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"red_hat_data_grid_8"},{"category":"default_component_of","full_product_name":{"name":"moditect-javadoc as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:moditect-javadoc"},"product_reference":"moditect-javadoc","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"moditect.src as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:moditect.src"},"product_reference":"moditect.src","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"assertj-core-javadoc (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:assertj-core-javadoc::javapackages-tools:201801"},"product_reference":"assertj-core-javadoc::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"assertj-core.src (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:assertj-core.src::javapackages-tools:201801"},"product_reference":"assertj-core.src::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"assertj-core (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:assertj-core::javapackages-tools:201801"},"product_reference":"assertj-core::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"log4j as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:log4j"},"product_reference":"log4j","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"log4j-jcl as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:log4j-jcl"},"product_reference":"log4j-jcl","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"log4j-slf4j as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:log4j-slf4j"},"product_reference":"log4j-slf4j","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"log4j-web as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:log4j-web"},"product_reference":"log4j-web","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"maven-failsafe-plugin (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:maven-failsafe-plugin::javapackages-tools:201801"},"product_reference":"maven-failsafe-plugin::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"maven-surefire-javadoc (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:maven-surefire-javadoc::javapackages-tools:201801"},"product_reference":"maven-surefire-javadoc::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"maven-surefire-plugin (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:maven-surefire-plugin::javapackages-tools:201801"},"product_reference":"maven-surefire-plugin::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"maven-surefire-provider-junit (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:maven-surefire-provider-junit::javapackages-tools:201801"},"product_reference":"maven-surefire-provider-junit::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"maven-surefire-provider-testng (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:maven-surefire-provider-testng::javapackages-tools:201801"},"product_reference":"maven-surefire-provider-testng::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"maven-surefire-report-parser (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:maven-surefire-report-parser::javapackages-tools:201801"},"product_reference":"maven-surefire-report-parser::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"maven-surefire-report-plugin (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:maven-surefire-report-plugin::javapackages-tools:201801"},"product_reference":"maven-surefire-report-plugin::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"maven-surefire.src (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:maven-surefire.src::javapackages-tools:201801"},"product_reference":"maven-surefire.src::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"maven-surefire (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:maven-surefire::javapackages-tools:201801"},"product_reference":"maven-surefire::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"powermock-api-easymock (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:powermock-api-easymock::javapackages-tools:201801"},"product_reference":"powermock-api-easymock::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"powermock-api-mockito (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:powermock-api-mockito::javapackages-tools:201801"},"product_reference":"powermock-api-mockito::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"powermock-api-support (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:powermock-api-support::javapackages-tools:201801"},"product_reference":"powermock-api-support::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"powermock-common (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:powermock-common::javapackages-tools:201801"},"product_reference":"powermock-common::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"powermock-core (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:powermock-core::javapackages-tools:201801"},"product_reference":"powermock-core::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"powermock-javadoc (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:powermock-javadoc::javapackages-tools:201801"},"product_reference":"powermock-javadoc::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"powermock-junit4 (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:powermock-junit4::javapackages-tools:201801"},"product_reference":"powermock-junit4::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"powermock-reflect (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:powermock-reflect::javapackages-tools:201801"},"product_reference":"powermock-reflect::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"powermock-testng (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:powermock-testng::javapackages-tools:201801"},"product_reference":"powermock-testng::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"powermock.src (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:powermock.src::javapackages-tools:201801"},"product_reference":"powermock.src::javapackages-tools:201801","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"log4j-jcl as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:log4j-jcl"},"product_reference":"log4j-jcl","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"log4j-slf4j as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:log4j-slf4j"},"product_reference":"log4j-slf4j","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"log4j.src as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:log4j.src"},"product_reference":"log4j.src","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"maven-enforcer-api as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:maven-enforcer-api"},"product_reference":"maven-enforcer-api","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"maven-enforcer-plugin as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:maven-enforcer-plugin"},"product_reference":"maven-enforcer-plugin","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"maven-enforcer-rules as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:maven-enforcer-rules"},"product_reference":"maven-enforcer-rules","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of Red Hat Fuse 7","product_id":"red_hat_fuse_7:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"red_hat_fuse_7"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of Red Hat JBoss Enterprise Application Platform 7","product_id":"red_hat_jboss_enterprise_application_platform_7:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"red_hat_jboss_enterprise_application_platform_7"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of Red Hat JBoss Enterprise Application Platform 8","product_id":"red_hat_jboss_enterprise_application_platform_8:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"red_hat_jboss_enterprise_application_platform_8"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack","product_id":"red_hat_jboss_enterprise_application_platform_expansion_pack:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"red_hat_jboss_enterprise_application_platform_expansion_pack"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-trustyai-service-rhel8 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel8"},"product_reference":"rhoai/odh-trustyai-service-rhel8","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-trustyai-service-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9"},"product_reference":"rhoai/odh-trustyai-service-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces","product_id":"red_hat_openshift_dev_spaces:devspaces/dashboard-rhel9"},"product_reference":"devspaces/dashboard-rhel9","relates_to_product_reference":"red_hat_openshift_dev_spaces"},{"category":"default_component_of","full_product_name":{"name":"devspaces/devspaces-operator-bundle as a component of Red Hat OpenShift Dev Spaces","product_id":"red_hat_openshift_dev_spaces:devspaces/devspaces-operator-bundle"},"product_reference":"devspaces/devspaces-operator-bundle","relates_to_product_reference":"red_hat_openshift_dev_spaces"},{"category":"default_component_of","full_product_name":{"name":"devspaces/udi-base-rhel10 as a component of Red Hat OpenShift Dev Spaces","product_id":"red_hat_openshift_dev_spaces:devspaces/udi-base-rhel10"},"product_reference":"devspaces/udi-base-rhel10","relates_to_product_reference":"red_hat_openshift_dev_spaces"},{"category":"default_component_of","full_product_name":{"name":"devspaces/udi-base-rhel9 as a component of Red Hat OpenShift Dev Spaces","product_id":"red_hat_openshift_dev_spaces:devspaces/udi-base-rhel9"},"product_reference":"devspaces/udi-base-rhel9","relates_to_product_reference":"red_hat_openshift_dev_spaces"},{"category":"default_component_of","full_product_name":{"name":"devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces","product_id":"red_hat_openshift_dev_spaces:devspaces/udi-rhel9"},"product_reference":"devspaces/udi-rhel9","relates_to_product_reference":"red_hat_openshift_dev_spaces"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of Red Hat Process Automation 7","product_id":"red_hat_process_automation_7:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"red_hat_process_automation_7"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of Red Hat Single Sign-On 7","product_id":"red_hat_single_sign-on_7:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"red_hat_single_sign-on_7"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of streams for Apache Kafka 2","product_id":"streams_for_apache_kafka_2:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"streams_for_apache_kafka_2"},{"category":"default_component_of","full_product_name":{"name":"assertj-core as a component of streams for Apache Kafka 3","product_id":"streams_for_apache_kafka_3:assertj-core"},"product_reference":"assertj-core","relates_to_product_reference":"streams_for_apache_kafka_3"},{"category":"default_component_of","full_product_name":{"name":"rocksdbjni.src as a component of streams for Apache Kafka 3","product_id":"streams_for_apache_kafka_3:rocksdbjni.src"},"product_reference":"rocksdbjni.src","relates_to_product_reference":"streams_for_apache_kafka_3"}]},"vulnerabilities":[{"cve":"CVE-2026-24400","cwe":{"id":"CWE-611","name":"Improper Restriction of XML External Entity Reference"},"discovery_date":"2026-01-26T23:01:28.099083+00:00","flags":[{"label":"component_not_present","product_ids":["red_hat_amq_broker_7:assertj-core","red_hat_build_of_apache_camel_4_for_quarkus_3:assertj-core","red_hat_data_grid_8:assertj-core","red_hat_enterprise_linux_10:moditect-javadoc","red_hat_enterprise_linux_10:moditect.src","red_hat_enterprise_linux_9:maven-enforcer-api","red_hat_enterprise_linux_9:maven-enforcer-plugin","red_hat_enterprise_linux_9:maven-enforcer-rules"]},{"label":"vulnerable_code_not_present","product_ids":["red_hat_build_of_apicurio_registry_3:assertj-core","red_hat_enterprise_linux_8:log4j","red_hat_enterprise_linux_8:log4j-jcl","red_hat_enterprise_linux_8:log4j-slf4j","red_hat_enterprise_linux_8:log4j-web","red_hat_enterprise_linux_8:maven-failsafe-plugin::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-javadoc::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-plugin::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-provider-junit::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-provider-testng::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-report-parser::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-report-plugin::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire.src::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-api-easymock::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-api-mockito::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-api-support::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-common::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-core::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-javadoc::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-junit4::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-reflect::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-testng::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock.src::javapackages-tools:201801","red_hat_jboss_enterprise_application_platform_7:assertj-core","red_hat_jboss_enterprise_application_platform_expansion_pack:assertj-core","red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel8","red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9","red_hat_openshift_dev_spaces:devspaces/dashboard-rhel9","red_hat_openshift_dev_spaces:devspaces/udi-base-rhel10","red_hat_openshift_dev_spaces:devspaces/udi-base-rhel9","red_hat_openshift_dev_spaces:devspaces/udi-rhel9","red_hat_single_sign-on_7:assertj-core","streams_for_apache_kafka_3:rocksdbjni.src"]},{"label":"vulnerable_code_not_in_execute_path","product_ids":["red_hat_openshift_dev_spaces:devspaces/devspaces-operator-bundle","streams_for_apache_kafka_2:assertj-core"]}],"ids":[{"system_name":"Red Hat Bugzilla ID","text":"2433116"}],"notes":[{"category":"description","text":"A flaw was found in AssertJ. An XML External Entity (XXE) vulnerability exists in the `XmlStringPrettyFormatter` component, which is used by the `isXmlEqualTo(CharSequence)` assertion. If an application processes untrusted XML input using these methods, a remote attacker could exploit this flaw to read arbitrary local files, perform Server-Side Request Forgery (SSRF) by making the server request arbitrary URLs, or cause a Denial of Service (DoS) through entity expansion attacks.","title":"Vulnerability description"},{"category":"summary","text":"assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE)","title":"Vulnerability summary"},{"category":"other","text":"Exploitation of this vulnerability requires that a user processes untrusted content with the affected package.","title":"Statement"},{"category":"general","text":"The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.","title":"CVSS score applicability"}],"product_status":{"fixed":["AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.noarch","AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.src","AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.noarch","AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.src","AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.noarch","AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.src","AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.noarch","AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.src","AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.noarch","AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.src","CRB-10.2.Z:assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch","Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16"],"known_affected":["openshift_serverless:openshift-serverless-1/kn-ekb-dispatcher-rhel9","openshift_serverless:openshift-serverless-1/kn-ekb-receiver-rhel9","red_hat_amq_clients:assertj-core","red_hat_build_of_apache_camel_-_hawtio_4:assertj-core","red_hat_build_of_debezium_2:assertj-core","red_hat_build_of_debezium_3:assertj-core","red_hat_build_of_optaplanner_8:assertj-core","red_hat_enterprise_linux_8:assertj-core-javadoc::javapackages-tools:201801","red_hat_enterprise_linux_8:assertj-core.src::javapackages-tools:201801","red_hat_enterprise_linux_8:assertj-core::javapackages-tools:201801","red_hat_enterprise_linux_9:log4j-jcl","red_hat_enterprise_linux_9:log4j-slf4j","red_hat_enterprise_linux_9:log4j.src","red_hat_fuse_7:assertj-core","red_hat_jboss_enterprise_application_platform_8:assertj-core","red_hat_process_automation_7:assertj-core","streams_for_apache_kafka_3:assertj-core"],"known_not_affected":["red_hat_amq_broker_7:assertj-core","red_hat_build_of_apache_camel_4_for_quarkus_3:assertj-core","red_hat_build_of_apicurio_registry_3:assertj-core","red_hat_data_grid_8:assertj-core","red_hat_enterprise_linux_10:moditect-javadoc","red_hat_enterprise_linux_10:moditect.src","red_hat_enterprise_linux_8:log4j","red_hat_enterprise_linux_8:log4j-jcl","red_hat_enterprise_linux_8:log4j-slf4j","red_hat_enterprise_linux_8:log4j-web","red_hat_enterprise_linux_8:maven-failsafe-plugin::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-javadoc::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-plugin::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-provider-junit::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-provider-testng::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-report-parser::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-report-plugin::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire.src::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-api-easymock::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-api-mockito::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-api-support::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-common::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-core::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-javadoc::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-junit4::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-reflect::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-testng::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock.src::javapackages-tools:201801","red_hat_enterprise_linux_9:maven-enforcer-api","red_hat_enterprise_linux_9:maven-enforcer-plugin","red_hat_enterprise_linux_9:maven-enforcer-rules","red_hat_jboss_enterprise_application_platform_7:assertj-core","red_hat_jboss_enterprise_application_platform_expansion_pack:assertj-core","red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel8","red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9","red_hat_openshift_dev_spaces:devspaces/dashboard-rhel9","red_hat_openshift_dev_spaces:devspaces/devspaces-operator-bundle","red_hat_openshift_dev_spaces:devspaces/udi-base-rhel10","red_hat_openshift_dev_spaces:devspaces/udi-base-rhel9","red_hat_openshift_dev_spaces:devspaces/udi-rhel9","red_hat_single_sign-on_7:assertj-core","streams_for_apache_kafka_2:assertj-core","streams_for_apache_kafka_3:rocksdbjni.src"]},"references":[{"category":"self","summary":"Canonical URL","url":"https://access.redhat.com/security/cve/CVE-2026-24400"},{"category":"external","summary":"RHBZ#2433116","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2433116"},{"category":"external","summary":"https://www.cve.org/CVERecord?id=CVE-2026-24400","url":"https://www.cve.org/CVERecord?id=CVE-2026-24400"},{"category":"external","summary":"https://nvd.nist.gov/vuln/detail/CVE-2026-24400","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24400"},{"category":"external","summary":"https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html","url":"https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html"},{"category":"external","summary":"https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a","url":"https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a"},{"category":"external","summary":"https://github.com/assertj/assertj/releases/tag/assertj-build-3.27.7","url":"https://github.com/assertj/assertj/releases/tag/assertj-build-3.27.7"},{"category":"external","summary":"https://github.com/assertj/assertj/security/advisories/GHSA-rqfh-9r24-8c9r","url":"https://github.com/assertj/assertj/security/advisories/GHSA-rqfh-9r24-8c9r"}],"release_date":"2026-01-26T22:19:02.161000+00:00","remediations":[{"category":"vendor_fix","date":"2026-08-25T12:49:55+00:00","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","product_ids":["AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.noarch","AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.src","CRB-10.2.Z:assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch"],"url":"https://access.redhat.com/errata/RHSA-2026:59372"},{"category":"vendor_fix","date":"2026-08-24T10:53:32+00:00","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","product_ids":["AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.noarch","AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.src"],"url":"https://access.redhat.com/errata/RHSA-2026:58956"},{"category":"vendor_fix","date":"2026-08-24T11:05:33+00:00","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","product_ids":["AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.noarch","AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.src"],"url":"https://access.redhat.com/errata/RHSA-2026:58957"},{"category":"vendor_fix","date":"2026-08-24T11:00:58+00:00","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","product_ids":["AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.noarch","AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.src"],"url":"https://access.redhat.com/errata/RHSA-2026:58949"},{"category":"vendor_fix","date":"2026-08-26T12:06:03+00:00","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","product_ids":["AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.noarch","AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.src"],"url":"https://access.redhat.com/errata/RHSA-2026:60215"},{"category":"vendor_fix","date":"2026-07-09T15:29:15+00:00","details":"Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","product_ids":["Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16"],"url":"https://access.redhat.com/errata/RHSA-2026:37390"},{"category":"no_fix_planned","details":"Will not fix","product_ids":["red_hat_build_of_debezium_3:assertj-core","red_hat_enterprise_linux_8:assertj-core-javadoc::javapackages-tools:201801","red_hat_enterprise_linux_8:assertj-core.src::javapackages-tools:201801","red_hat_enterprise_linux_8:assertj-core::javapackages-tools:201801","red_hat_enterprise_linux_9:log4j-jcl","red_hat_enterprise_linux_9:log4j-slf4j","red_hat_enterprise_linux_9:log4j.src","red_hat_fuse_7:assertj-core","red_hat_jboss_enterprise_application_platform_8:assertj-core","streams_for_apache_kafka_3:assertj-core"]},{"category":"none_available","details":"Affected","product_ids":["openshift_serverless:openshift-serverless-1/kn-ekb-dispatcher-rhel9","openshift_serverless:openshift-serverless-1/kn-ekb-receiver-rhel9","red_hat_amq_clients:assertj-core","red_hat_build_of_apache_camel_-_hawtio_4:assertj-core","red_hat_build_of_debezium_2:assertj-core","red_hat_build_of_optaplanner_8:assertj-core","red_hat_process_automation_7:assertj-core"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","version":"3.1"},"products":["AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.noarch","AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.src","AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.noarch","AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.src","AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.noarch","AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.src","AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.noarch","AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.src","AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.noarch","AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.src","CRB-10.2.Z:assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch","Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16","openshift_serverless:openshift-serverless-1/kn-ekb-dispatcher-rhel9","openshift_serverless:openshift-serverless-1/kn-ekb-receiver-rhel9","red_hat_amq_broker_7:assertj-core","red_hat_amq_clients:assertj-core","red_hat_build_of_apache_camel_-_hawtio_4:assertj-core","red_hat_build_of_apache_camel_4_for_quarkus_3:assertj-core","red_hat_build_of_apicurio_registry_3:assertj-core","red_hat_build_of_debezium_2:assertj-core","red_hat_build_of_debezium_3:assertj-core","red_hat_build_of_optaplanner_8:assertj-core","red_hat_data_grid_8:assertj-core","red_hat_enterprise_linux_10:moditect-javadoc","red_hat_enterprise_linux_10:moditect.src","red_hat_enterprise_linux_8:assertj-core-javadoc::javapackages-tools:201801","red_hat_enterprise_linux_8:assertj-core.src::javapackages-tools:201801","red_hat_enterprise_linux_8:assertj-core::javapackages-tools:201801","red_hat_enterprise_linux_8:log4j","red_hat_enterprise_linux_8:log4j-jcl","red_hat_enterprise_linux_8:log4j-slf4j","red_hat_enterprise_linux_8:log4j-web","red_hat_enterprise_linux_8:maven-failsafe-plugin::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-javadoc::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-plugin::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-provider-junit::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-provider-testng::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-report-parser::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-report-plugin::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire.src::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-api-easymock::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-api-mockito::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-api-support::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-common::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-core::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-javadoc::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-junit4::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-reflect::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-testng::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock.src::javapackages-tools:201801","red_hat_enterprise_linux_9:log4j-jcl","red_hat_enterprise_linux_9:log4j-slf4j","red_hat_enterprise_linux_9:log4j.src","red_hat_enterprise_linux_9:maven-enforcer-api","red_hat_enterprise_linux_9:maven-enforcer-plugin","red_hat_enterprise_linux_9:maven-enforcer-rules","red_hat_fuse_7:assertj-core","red_hat_jboss_enterprise_application_platform_7:assertj-core","red_hat_jboss_enterprise_application_platform_8:assertj-core","red_hat_jboss_enterprise_application_platform_expansion_pack:assertj-core","red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel8","red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9","red_hat_openshift_dev_spaces:devspaces/dashboard-rhel9","red_hat_openshift_dev_spaces:devspaces/devspaces-operator-bundle","red_hat_openshift_dev_spaces:devspaces/udi-base-rhel10","red_hat_openshift_dev_spaces:devspaces/udi-base-rhel9","red_hat_openshift_dev_spaces:devspaces/udi-rhel9","red_hat_process_automation_7:assertj-core","red_hat_single_sign-on_7:assertj-core","streams_for_apache_kafka_2:assertj-core","streams_for_apache_kafka_3:assertj-core","streams_for_apache_kafka_3:rocksdbjni.src"]}],"threats":[{"category":"impact","details":"Moderate","product_ids":["AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.noarch","AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.src","AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.noarch","AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.src","AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.noarch","AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.src","AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.noarch","AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.src","AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.noarch","AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.src","CRB-10.2.Z:assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch","Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16","openshift_serverless:openshift-serverless-1/kn-ekb-dispatcher-rhel9","openshift_serverless:openshift-serverless-1/kn-ekb-receiver-rhel9","red_hat_amq_broker_7:assertj-core","red_hat_amq_clients:assertj-core","red_hat_build_of_apache_camel_-_hawtio_4:assertj-core","red_hat_build_of_apache_camel_4_for_quarkus_3:assertj-core","red_hat_build_of_apicurio_registry_3:assertj-core","red_hat_build_of_debezium_2:assertj-core","red_hat_build_of_debezium_3:assertj-core","red_hat_build_of_optaplanner_8:assertj-core","red_hat_data_grid_8:assertj-core","red_hat_enterprise_linux_10:moditect-javadoc","red_hat_enterprise_linux_10:moditect.src","red_hat_enterprise_linux_8:assertj-core-javadoc::javapackages-tools:201801","red_hat_enterprise_linux_8:assertj-core.src::javapackages-tools:201801","red_hat_enterprise_linux_8:assertj-core::javapackages-tools:201801","red_hat_enterprise_linux_8:log4j","red_hat_enterprise_linux_8:log4j-jcl","red_hat_enterprise_linux_8:log4j-slf4j","red_hat_enterprise_linux_8:log4j-web","red_hat_enterprise_linux_8:maven-failsafe-plugin::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-javadoc::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-plugin::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-provider-junit::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-provider-testng::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-report-parser::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire-report-plugin::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire.src::javapackages-tools:201801","red_hat_enterprise_linux_8:maven-surefire::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-api-easymock::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-api-mockito::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-api-support::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-common::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-core::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-javadoc::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-junit4::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-reflect::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock-testng::javapackages-tools:201801","red_hat_enterprise_linux_8:powermock.src::javapackages-tools:201801","red_hat_enterprise_linux_9:log4j-jcl","red_hat_enterprise_linux_9:log4j-slf4j","red_hat_enterprise_linux_9:log4j.src","red_hat_enterprise_linux_9:maven-enforcer-api","red_hat_enterprise_linux_9:maven-enforcer-plugin","red_hat_enterprise_linux_9:maven-enforcer-rules","red_hat_fuse_7:assertj-core","red_hat_jboss_enterprise_application_platform_7:assertj-core","red_hat_jboss_enterprise_application_platform_8:assertj-core","red_hat_jboss_enterprise_application_platform_expansion_pack:assertj-core","red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel8","red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9","red_hat_openshift_dev_spaces:devspaces/dashboard-rhel9","red_hat_openshift_dev_spaces:devspaces/devspaces-operator-bundle","red_hat_openshift_dev_spaces:devspaces/udi-base-rhel10","red_hat_openshift_dev_spaces:devspaces/udi-base-rhel9","red_hat_openshift_dev_spaces:devspaces/udi-rhel9","red_hat_process_automation_7:assertj-core","red_hat_single_sign-on_7:assertj-core","streams_for_apache_kafka_2:assertj-core","streams_for_apache_kafka_3:assertj-core","streams_for_apache_kafka_3:rocksdbjni.src"]}],"title":"assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE)"}]}