cve-2026-24400
MEDIUM CVSS 6.1 csaf_redhat
Description
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Timeline
- Published
- 2026-01-26 22:19 UTC
- Last Modified
- 2026-08-26
CVSS Details
CVSS details not available.
Affected Products
No product information available.
Weaknesses (CWE)
References
No references available.
Linked Vulnerabilities
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright © Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24400.json"
}
],
"title": "assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE)",
"tracking": {
"current_release_date": "2026-08-26T12:07:17+00:00",
"generator": {
"date": "2026-08-26T12:07:17+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "CVE-2026-24400",
"initial_release_date": "2026-01-26T22:19:02.161000+00:00",
"revision_history": [
{
"date": "2026-01-26T22:19:02.161000+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-14T08:38:03+00:00",
"number": "2",
"summary": "Current version"
},
{
"date": "2026-08-26T12:07:17+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift Serverless",
"product": {
"name": "OpenShift Serverless",
"product_id": "openshift_serverless",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:serverless:1"
}
}
}
],
"category": "product_family",
"name": "OpenShift Serverless"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat AMQ Broker 7",
"product": {
"name": "Red Hat AMQ Broker 7",
"product_id": "red_hat_amq_broker_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:amq_broker:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat AMQ Broker 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat AMQ Clients",
"product": {
"name": "Red Hat AMQ Clients",
"product_id": "red_hat_amq_clients",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:amq_clients:2023"
}
}
}
],
"category": "product_family",
"name": "Red Hat AMQ Clients"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apache Camel 4 for Quarkus 3",
"product": {
"name": "Red Hat build of Apache Camel 4 for Quarkus 3",
"product_id": "red_hat_build_of_apache_camel_4_for_quarkus_3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:camel_quarkus:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Apache Camel 4 for Quarkus 3"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apache Camel - HawtIO 4",
"product": {
"name": "Red Hat build of Apache Camel - HawtIO 4",
"product_id": "red_hat_build_of_apache_camel_-_hawtio_4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:apache_camel_hawtio:4"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Apache Camel - HawtIO 4"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apicurio Registry 3",
"product": {
"name": "Red Hat build of Apicurio Registry 3",
"product_id": "red_hat_build_of_apicurio_registry_3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:apicurio_registry:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Apicurio Registry 3"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Debezium 2",
"product": {
"name": "Red Hat build of Debezium 2",
"product_id": "red_hat_build_of_debezium_2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:debezium:2"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Debezium 2"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Debezium 3",
"product": {
"name": "Red Hat build of Debezium 3",
"product_id": "red_hat_build_of_debezium_3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:debezium:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Debezium 3"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of OptaPlanner 8",
"product": {
"name": "Red Hat build of OptaPlanner 8",
"product_id": "red_hat_build_of_optaplanner_8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:optaplanner:::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of OptaPlanner 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Data Grid 8",
"product": {
"name": "Red Hat Data Grid 8",
"product_id": "red_hat_data_grid_8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_data_grid:8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Data Grid 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 10",
"product": {
"name": "Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 10"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 8",
"product": {
"name": "Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 9",
"product": {
"name": "Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 9"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Fuse 7",
"product": {
"name": "Red Hat Fuse 7",
"product_id": "red_hat_fuse_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_fuse:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Fuse 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 7",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7",
"product_id": "red_hat_jboss_enterprise_application_platform_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 8",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 8",
"product_id": "red_hat_jboss_enterprise_application_platform_8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jbosseapxp"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform Expansion Pack"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift AI (RHOAI)",
"product": {
"name": "Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai)",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_ai"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift AI (RHOAI)"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Dev Spaces",
"product": {
"name": "Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_devspaces:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Dev Spaces"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Process Automation 7",
"product": {
"name": "Red Hat Process Automation 7",
"product_id": "red_hat_process_automation_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Process Automation 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Single Sign-On 7",
"product": {
"name": "Red Hat Single Sign-On 7",
"product_id": "red_hat_single_sign-on_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:red_hat_single_sign_on:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Single Sign-On 7"
},
{
"branches": [
{
"category": "product_name",
"name": "streams for Apache Kafka 2",
"product": {
"name": "streams for Apache Kafka 2",
"product_id": "streams_for_apache_kafka_2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:amq_streams:2"
}
}
}
],
"category": "product_family",
"name": "streams for Apache Kafka 2"
},
{
"branches": [
{
"category": "product_name",
"name": "streams for Apache Kafka 3",
"product": {
"name": "streams for Apache Kafka 3",
"product_id": "streams_for_apache_kafka_3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:amq_streams:3"
}
}
}
],
"category": "product_family",
"name": "streams for Apache Kafka 3"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:9.4::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:9.2::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16",
"product": {
"name": "Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16",
"product_id": "Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:apache_camel_spring_boot:4.18"
}
}
}
],
"category": "product_family",
"name": "Red Hat Build of Apache Camel"
},
{
"category": "product_version",
"name": "openshift-serverless-1/kn-ekb-dispatcher-rhel9",
"product": {
"name": "openshift-serverless-1/kn-ekb-dispatcher-rhel9",
"product_id": "openshift-serverless-1/kn-ekb-dispatcher-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/kn-ekb-dispatcher-rhel9?repository_url=registry.redhat.io/openshift-serverless-1/kn-ekb-dispatcher-rhel9"
}
}
},
{
"category": "product_version",
"name": "openshift-serverless-1/kn-ekb-receiver-rhel9",
"product": {
"name": "openshift-serverless-1/kn-ekb-receiver-rhel9",
"product_id": "openshift-serverless-1/kn-ekb-receiver-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/kn-ekb-receiver-rhel9?repository_url=registry.redhat.io/openshift-serverless-1/kn-ekb-receiver-rhel9"
}
}
},
{
"category": "product_version",
"name": "assertj-core",
"product": {
"name": "assertj-core",
"product_id": "assertj-core",
"product_identification_helper": {
"purl": "pkg:maven/org.assertj/assertj-core"
}
}
},
{
"category": "product_version",
"name": "moditect-javadoc",
"product": {
"name": "moditect-javadoc",
"product_id": "moditect-javadoc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/moditect-javadoc"
}
}
},
{
"category": "product_version",
"name": "moditect.src",
"product": {
"name": "moditect.src",
"product_id": "moditect.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/moditect?arch=src"
}
}
},
{
"category": "product_version",
"name": "assertj-core::javapackages-tools:201801",
"product": {
"name": "assertj-core (javapackages-tools:201801)",
"product_id": "assertj-core::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/assertj-core?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "assertj-core.src::javapackages-tools:201801",
"product": {
"name": "assertj-core.src (javapackages-tools:201801)",
"product_id": "assertj-core.src::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/assertj-core?arch=src&rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "assertj-core-javadoc::javapackages-tools:201801",
"product": {
"name": "assertj-core-javadoc (javapackages-tools:201801)",
"product_id": "assertj-core-javadoc::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/assertj-core-javadoc?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "maven-surefire-provider-junit::javapackages-tools:201801",
"product": {
"name": "maven-surefire-provider-junit (javapackages-tools:201801)",
"product_id": "maven-surefire-provider-junit::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/maven-surefire-provider-junit?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "maven-surefire-provider-testng::javapackages-tools:201801",
"product": {
"name": "maven-surefire-provider-testng (javapackages-tools:201801)",
"product_id": "maven-surefire-provider-testng::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/maven-surefire-provider-testng?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "maven-failsafe-plugin::javapackages-tools:201801",
"product": {
"name": "maven-failsafe-plugin (javapackages-tools:201801)",
"product_id": "maven-failsafe-plugin::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/maven-failsafe-plugin?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "maven-surefire-plugin::javapackages-tools:201801",
"product": {
"name": "maven-surefire-plugin (javapackages-tools:201801)",
"product_id": "maven-surefire-plugin::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/maven-surefire-plugin?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "maven-surefire-report-parser::javapackages-tools:201801",
"product": {
"name": "maven-surefire-report-parser (javapackages-tools:201801)",
"product_id": "maven-surefire-report-parser::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/maven-surefire-report-parser?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "maven-surefire-report-plugin::javapackages-tools:201801",
"product": {
"name": "maven-surefire-report-plugin (javapackages-tools:201801)",
"product_id": "maven-surefire-report-plugin::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/maven-surefire-report-plugin?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "maven-surefire.src::javapackages-tools:201801",
"product": {
"name": "maven-surefire.src (javapackages-tools:201801)",
"product_id": "maven-surefire.src::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/maven-surefire?arch=src&rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "maven-surefire-javadoc::javapackages-tools:201801",
"product": {
"name": "maven-surefire-javadoc (javapackages-tools:201801)",
"product_id": "maven-surefire-javadoc::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/maven-surefire-javadoc?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "maven-surefire::javapackages-tools:201801",
"product": {
"name": "maven-surefire (javapackages-tools:201801)",
"product_id": "maven-surefire::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/maven-surefire?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "powermock-testng::javapackages-tools:201801",
"product": {
"name": "powermock-testng (javapackages-tools:201801)",
"product_id": "powermock-testng::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/powermock-testng?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "powermock-api-easymock::javapackages-tools:201801",
"product": {
"name": "powermock-api-easymock (javapackages-tools:201801)",
"product_id": "powermock-api-easymock::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/powermock-api-easymock?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "powermock-common::javapackages-tools:201801",
"product": {
"name": "powermock-common (javapackages-tools:201801)",
"product_id": "powermock-common::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/powermock-common?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "powermock.src::javapackages-tools:201801",
"product": {
"name": "powermock.src (javapackages-tools:201801)",
"product_id": "powermock.src::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/powermock?arch=src&rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "powermock-reflect::javapackages-tools:201801",
"product": {
"name": "powermock-reflect (javapackages-tools:201801)",
"product_id": "powermock-reflect::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/powermock-reflect?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "powermock-javadoc::javapackages-tools:201801",
"product": {
"name": "powermock-javadoc (javapackages-tools:201801)",
"product_id": "powermock-javadoc::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/powermock-javadoc?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "powermock-api-mockito::javapackages-tools:201801",
"product": {
"name": "powermock-api-mockito (javapackages-tools:201801)",
"product_id": "powermock-api-mockito::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/powermock-api-mockito?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "powermock-core::javapackages-tools:201801",
"product": {
"name": "powermock-core (javapackages-tools:201801)",
"product_id": "powermock-core::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/powermock-core?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "powermock-junit4::javapackages-tools:201801",
"product": {
"name": "powermock-junit4 (javapackages-tools:201801)",
"product_id": "powermock-junit4::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/powermock-junit4?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "powermock-api-support::javapackages-tools:201801",
"product": {
"name": "powermock-api-support (javapackages-tools:201801)",
"product_id": "powermock-api-support::javapackages-tools:201801",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/powermock-api-support?rpmmod=javapackages-tools:201801"
}
}
},
{
"category": "product_version",
"name": "log4j",
"product": {
"name": "log4j",
"product_id": "log4j",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/log4j?rpmmod=log4j:2"
}
}
},
{
"category": "product_version",
"name": "log4j-jcl",
"product": {
"name": "log4j-jcl",
"product_id": "log4j-jcl",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/log4j-jcl?rpmmod=log4j:2"
}
}
},
{
"category": "product_version",
"name": "log4j-slf4j",
"product": {
"name": "log4j-slf4j",
"product_id": "log4j-slf4j",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/log4j-slf4j?rpmmod=log4j:2"
}
}
},
{
"category": "product_version",
"name": "log4j-web",
"product": {
"name": "log4j-web",
"product_id": "log4j-web",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/log4j-web?rpmmod=log4j:2"
}
}
},
{
"category": "product_version",
"name": "log4j.src",
"product": {
"name": "log4j.src",
"product_id": "log4j.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/log4j?arch=src"
}
}
},
{
"category": "product_version",
"name": "maven-enforcer-api",
"product": {
"name": "maven-enforcer-api",
"product_id": "maven-enforcer-api",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/maven-enforcer-api"
}
}
},
{
"category": "product_version",
"name": "maven-enforcer-plugin",
"product": {
"name": "maven-enforcer-plugin",
"product_id": "maven-enforcer-plugin",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/maven-enforcer-plugin"
}
}
},
{
"category": "product_version",
"name": "maven-enforcer-rules",
"product": {
"name": "maven-enforcer-rules",
"product_id": "maven-enforcer-rules",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/maven-enforcer-rules"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-trustyai-service-rhel8",
"product": {
"name": "rhoai/odh-trustyai-service-rhel8",
"product_id": "rhoai/odh-trustyai-service-rhel8",
"product_identification_helper": {
"purl": "pkg:oci/odh-trustyai-service-rhel8?repository_url=registry.redhat.io/rhoai/odh-trustyai-service-rhel8"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-trustyai-service-rhel9",
"product": {
"name": "rhoai/odh-trustyai-service-rhel9",
"product_id": "rhoai/odh-trustyai-service-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-trustyai-service-rhel9?repository_url=registry.redhat.io/rhoai/odh-trustyai-service-rhel9"
}
}
},
{
"category": "product_version",
"name": "devspaces/dashboard-rhel9",
"product": {
"name": "devspaces/dashboard-rhel9",
"product_id": "devspaces/dashboard-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9?repository_url=registry.redhat.io/devspaces/dashboard-rhel9"
}
}
},
{
"category": "product_version",
"name": "devspaces/devspaces-operator-bundle",
"product": {
"name": "devspaces/devspaces-operator-bundle",
"product_id": "devspaces/devspaces-operator-bundle",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-operator-bundle?repository_url=registry.redhat.io/devspaces/devspaces-operator-bundle"
}
}
},
{
"category": "product_version",
"name": "devspaces/udi-base-rhel10",
"product": {
"name": "devspaces/udi-base-rhel10",
"product_id": "devspaces/udi-base-rhel10",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10?repository_url=registry.redhat.io/devspaces/udi-base-rhel10"
}
}
},
{
"category": "product_version",
"name": "devspaces/udi-base-rhel9",
"product": {
"name": "devspaces/udi-base-rhel9",
"product_id": "devspaces/udi-base-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9?repository_url=registry.redhat.io/devspaces/udi-base-rhel9"
}
}
},
{
"category": "product_version",
"name": "devspaces/udi-rhel9",
"product": {
"name": "devspaces/udi-rhel9",
"product_id": "devspaces/udi-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9?repository_url=registry.redhat.io/devspaces/udi-rhel9"
}
}
},
{
"category": "product_version",
"name": "rocksdbjni.src",
"product": {
"name": "rocksdbjni.src",
"product_id": "rocksdbjni.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rocksdbjni?arch=src"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "assertj-core-0:3.19.0-9.el9_8.1.noarch",
"product": {
"name": "assertj-core-0:3.19.0-9.el9_8.1.noarch",
"product_id": "assertj-core-0:3.19.0-9.el9_8.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/assertj-core@3.19.0-9.el9_8.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "assertj-core-0:3.24.2-9.el10_2.1.noarch",
"product": {
"name": "assertj-core-0:3.24.2-9.el10_2.1.noarch",
"product_id": "assertj-core-0:3.24.2-9.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/assertj-core@3.24.2-9.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch",
"product": {
"name": "assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch",
"product_id": "assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/assertj-core-javadoc@3.24.2-9.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "assertj-core-0:3.19.0-5.el9_4.2.noarch",
"product": {
"name": "assertj-core-0:3.19.0-5.el9_4.2.noarch",
"product_id": "assertj-core-0:3.19.0-5.el9_4.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/assertj-core@3.19.0-5.el9_4.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "assertj-core-0:3.19.0-9.el9_6.1.noarch",
"product": {
"name": "assertj-core-0:3.19.0-9.el9_6.1.noarch",
"product_id": "assertj-core-0:3.19.0-9.el9_6.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/assertj-core@3.19.0-9.el9_6.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "assertj-core-0:3.19.0-5.el9_2.2.noarch",
"product": {
"name": "assertj-core-0:3.19.0-5.el9_2.2.noarch",
"product_id": "assertj-core-0:3.19.0-5.el9_2.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/assertj-core@3.19.0-5.el9_2.2?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "assertj-core-0:3.19.0-9.el9_8.1.src",
"product": {
"name": "assertj-core-0:3.19.0-9.el9_8.1.src",
"product_id": "assertj-core-0:3.19.0-9.el9_8.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/assertj-core@3.19.0-9.el9_8.1?arch=src"
}
}
},
{
"category": "product_version",
"name": "assertj-core-0:3.24.2-9.el10_2.1.src",
"product": {
"name": "assertj-core-0:3.24.2-9.el10_2.1.src",
"product_id": "assertj-core-0:3.24.2-9.el10_2.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/assertj-core@3.24.2-9.el10_2.1?arch=src"
}
}
},
{
"category": "product_version",
"name": "assertj-core-0:3.19.0-5.el9_4.2.src",
"product": {
"name": "assertj-core-0:3.19.0-5.el9_4.2.src",
"product_id": "assertj-core-0:3.19.0-5.el9_4.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/assertj-core@3.19.0-5.el9_4.2?arch=src"
}
}
},
{
"category": "product_version",
"name": "assertj-core-0:3.19.0-9.el9_6.1.src",
"product": {
"name": "assertj-core-0:3.19.0-9.el9_6.1.src",
"product_id": "assertj-core-0:3.19.0-9.el9_6.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/assertj-core@3.19.0-9.el9_6.1?arch=src"
}
}
},
{
"category": "product_version",
"name": "assertj-core-0:3.19.0-5.el9_2.2.src",
"product": {
"name": "assertj-core-0:3.19.0-5.el9_2.2.src",
"product_id": "assertj-core-0:3.19.0-5.el9_2.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/assertj-core@3.19.0-5.el9_2.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core-0:3.24.2-9.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.noarch"
},
"product_reference": "assertj-core-0:3.24.2-9.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core-0:3.24.2-9.el10_2.1.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.src"
},
"product_reference": "assertj-core-0:3.24.2-9.el10_2.1.src",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core-0:3.19.0-5.el9_2.2.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.noarch"
},
"product_reference": "assertj-core-0:3.19.0-5.el9_2.2.noarch",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core-0:3.19.0-5.el9_2.2.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.src"
},
"product_reference": "assertj-core-0:3.19.0-5.el9_2.2.src",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core-0:3.19.0-5.el9_4.2.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.noarch"
},
"product_reference": "assertj-core-0:3.19.0-5.el9_4.2.noarch",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core-0:3.19.0-5.el9_4.2.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.src"
},
"product_reference": "assertj-core-0:3.19.0-5.el9_4.2.src",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core-0:3.19.0-9.el9_6.1.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.noarch"
},
"product_reference": "assertj-core-0:3.19.0-9.el9_6.1.noarch",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core-0:3.19.0-9.el9_6.1.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.src"
},
"product_reference": "assertj-core-0:3.19.0-9.el9_6.1.src",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core-0:3.19.0-9.el9_8.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.noarch"
},
"product_reference": "assertj-core-0:3.19.0-9.el9_8.1.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core-0:3.19.0-9.el9_8.1.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.src"
},
"product_reference": "assertj-core-0:3.19.0-9.el9_8.1.src",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch"
},
"product_reference": "assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/kn-ekb-dispatcher-rhel9 as a component of OpenShift Serverless",
"product_id": "openshift_serverless:openshift-serverless-1/kn-ekb-dispatcher-rhel9"
},
"product_reference": "openshift-serverless-1/kn-ekb-dispatcher-rhel9",
"relates_to_product_reference": "openshift_serverless"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-serverless-1/kn-ekb-receiver-rhel9 as a component of OpenShift Serverless",
"product_id": "openshift_serverless:openshift-serverless-1/kn-ekb-receiver-rhel9"
},
"product_reference": "openshift-serverless-1/kn-ekb-receiver-rhel9",
"relates_to_product_reference": "openshift_serverless"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of Red Hat AMQ Broker 7",
"product_id": "red_hat_amq_broker_7:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "red_hat_amq_broker_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of Red Hat AMQ Clients",
"product_id": "red_hat_amq_clients:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "red_hat_amq_clients"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of Red Hat build of Apache Camel - HawtIO 4",
"product_id": "red_hat_build_of_apache_camel_-_hawtio_4:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "red_hat_build_of_apache_camel_-_hawtio_4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of Red Hat build of Apache Camel 4 for Quarkus 3",
"product_id": "red_hat_build_of_apache_camel_4_for_quarkus_3:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "red_hat_build_of_apache_camel_4_for_quarkus_3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of Red Hat build of Apicurio Registry 3",
"product_id": "red_hat_build_of_apicurio_registry_3:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "red_hat_build_of_apicurio_registry_3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of Red Hat build of Debezium 2",
"product_id": "red_hat_build_of_debezium_2:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "red_hat_build_of_debezium_2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of Red Hat build of Debezium 3",
"product_id": "red_hat_build_of_debezium_3:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "red_hat_build_of_debezium_3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of Red Hat build of OptaPlanner 8",
"product_id": "red_hat_build_of_optaplanner_8:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "red_hat_build_of_optaplanner_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of Red Hat Data Grid 8",
"product_id": "red_hat_data_grid_8:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "red_hat_data_grid_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "moditect-javadoc as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:moditect-javadoc"
},
"product_reference": "moditect-javadoc",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "moditect.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:moditect.src"
},
"product_reference": "moditect.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core-javadoc (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:assertj-core-javadoc::javapackages-tools:201801"
},
"product_reference": "assertj-core-javadoc::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core.src (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:assertj-core.src::javapackages-tools:201801"
},
"product_reference": "assertj-core.src::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:assertj-core::javapackages-tools:201801"
},
"product_reference": "assertj-core::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:log4j"
},
"product_reference": "log4j",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-web as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:log4j-web"
},
"product_reference": "log4j-web",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "maven-failsafe-plugin (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:maven-failsafe-plugin::javapackages-tools:201801"
},
"product_reference": "maven-failsafe-plugin::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "maven-surefire-javadoc (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:maven-surefire-javadoc::javapackages-tools:201801"
},
"product_reference": "maven-surefire-javadoc::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "maven-surefire-plugin (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:maven-surefire-plugin::javapackages-tools:201801"
},
"product_reference": "maven-surefire-plugin::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "maven-surefire-provider-junit (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:maven-surefire-provider-junit::javapackages-tools:201801"
},
"product_reference": "maven-surefire-provider-junit::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "maven-surefire-provider-testng (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:maven-surefire-provider-testng::javapackages-tools:201801"
},
"product_reference": "maven-surefire-provider-testng::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "maven-surefire-report-parser (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:maven-surefire-report-parser::javapackages-tools:201801"
},
"product_reference": "maven-surefire-report-parser::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "maven-surefire-report-plugin (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:maven-surefire-report-plugin::javapackages-tools:201801"
},
"product_reference": "maven-surefire-report-plugin::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "maven-surefire.src (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:maven-surefire.src::javapackages-tools:201801"
},
"product_reference": "maven-surefire.src::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "maven-surefire (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:maven-surefire::javapackages-tools:201801"
},
"product_reference": "maven-surefire::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "powermock-api-easymock (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:powermock-api-easymock::javapackages-tools:201801"
},
"product_reference": "powermock-api-easymock::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "powermock-api-mockito (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:powermock-api-mockito::javapackages-tools:201801"
},
"product_reference": "powermock-api-mockito::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "powermock-api-support (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:powermock-api-support::javapackages-tools:201801"
},
"product_reference": "powermock-api-support::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "powermock-common (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:powermock-common::javapackages-tools:201801"
},
"product_reference": "powermock-common::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "powermock-core (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:powermock-core::javapackages-tools:201801"
},
"product_reference": "powermock-core::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "powermock-javadoc (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:powermock-javadoc::javapackages-tools:201801"
},
"product_reference": "powermock-javadoc::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "powermock-junit4 (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:powermock-junit4::javapackages-tools:201801"
},
"product_reference": "powermock-junit4::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "powermock-reflect (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:powermock-reflect::javapackages-tools:201801"
},
"product_reference": "powermock-reflect::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "powermock-testng (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:powermock-testng::javapackages-tools:201801"
},
"product_reference": "powermock-testng::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "powermock.src (javapackages-tools:201801) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:powermock.src::javapackages-tools:201801"
},
"product_reference": "powermock.src::javapackages-tools:201801",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-jcl as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:log4j-jcl"
},
"product_reference": "log4j-jcl",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j-slf4j as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:log4j-slf4j"
},
"product_reference": "log4j-slf4j",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "log4j.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:log4j.src"
},
"product_reference": "log4j.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "maven-enforcer-api as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:maven-enforcer-api"
},
"product_reference": "maven-enforcer-api",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "maven-enforcer-plugin as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:maven-enforcer-plugin"
},
"product_reference": "maven-enforcer-plugin",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "maven-enforcer-rules as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:maven-enforcer-rules"
},
"product_reference": "maven-enforcer-rules",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of Red Hat JBoss Enterprise Application Platform 7",
"product_id": "red_hat_jboss_enterprise_application_platform_7:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of Red Hat JBoss Enterprise Application Platform 8",
"product_id": "red_hat_jboss_enterprise_application_platform_8:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack",
"product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-trustyai-service-rhel8 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel8"
},
"product_reference": "rhoai/odh-trustyai-service-rhel8",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-trustyai-service-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9"
},
"product_reference": "rhoai/odh-trustyai-service-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "devspaces/dashboard-rhel9 as a component of Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces:devspaces/dashboard-rhel9"
},
"product_reference": "devspaces/dashboard-rhel9",
"relates_to_product_reference": "red_hat_openshift_dev_spaces"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "devspaces/devspaces-operator-bundle as a component of Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces:devspaces/devspaces-operator-bundle"
},
"product_reference": "devspaces/devspaces-operator-bundle",
"relates_to_product_reference": "red_hat_openshift_dev_spaces"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "devspaces/udi-base-rhel10 as a component of Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces:devspaces/udi-base-rhel10"
},
"product_reference": "devspaces/udi-base-rhel10",
"relates_to_product_reference": "red_hat_openshift_dev_spaces"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "devspaces/udi-base-rhel9 as a component of Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces:devspaces/udi-base-rhel9"
},
"product_reference": "devspaces/udi-base-rhel9",
"relates_to_product_reference": "red_hat_openshift_dev_spaces"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces:devspaces/udi-rhel9"
},
"product_reference": "devspaces/udi-rhel9",
"relates_to_product_reference": "red_hat_openshift_dev_spaces"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of Red Hat Process Automation 7",
"product_id": "red_hat_process_automation_7:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "red_hat_process_automation_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of Red Hat Single Sign-On 7",
"product_id": "red_hat_single_sign-on_7:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "red_hat_single_sign-on_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of streams for Apache Kafka 2",
"product_id": "streams_for_apache_kafka_2:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "streams_for_apache_kafka_2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "assertj-core as a component of streams for Apache Kafka 3",
"product_id": "streams_for_apache_kafka_3:assertj-core"
},
"product_reference": "assertj-core",
"relates_to_product_reference": "streams_for_apache_kafka_3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rocksdbjni.src as a component of streams for Apache Kafka 3",
"product_id": "streams_for_apache_kafka_3:rocksdbjni.src"
},
"product_reference": "rocksdbjni.src",
"relates_to_product_reference": "streams_for_apache_kafka_3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-24400",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"discovery_date": "2026-01-26T23:01:28.099083+00:00",
"flags": [
{
"label": "component_not_present",
"product_ids": [
"red_hat_amq_broker_7:assertj-core",
"red_hat_build_of_apache_camel_4_for_quarkus_3:assertj-core",
"red_hat_data_grid_8:assertj-core",
"red_hat_enterprise_linux_10:moditect-javadoc",
"red_hat_enterprise_linux_10:moditect.src",
"red_hat_enterprise_linux_9:maven-enforcer-api",
"red_hat_enterprise_linux_9:maven-enforcer-plugin",
"red_hat_enterprise_linux_9:maven-enforcer-rules"
]
},
{
"label": "vulnerable_code_not_present",
"product_ids": [
"red_hat_build_of_apicurio_registry_3:assertj-core",
"red_hat_enterprise_linux_8:log4j",
"red_hat_enterprise_linux_8:log4j-jcl",
"red_hat_enterprise_linux_8:log4j-slf4j",
"red_hat_enterprise_linux_8:log4j-web",
"red_hat_enterprise_linux_8:maven-failsafe-plugin::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-plugin::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-provider-junit::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-provider-testng::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-report-parser::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-report-plugin::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire.src::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-api-easymock::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-api-mockito::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-api-support::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-common::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-core::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-junit4::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-reflect::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-testng::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock.src::javapackages-tools:201801",
"red_hat_jboss_enterprise_application_platform_7:assertj-core",
"red_hat_jboss_enterprise_application_platform_expansion_pack:assertj-core",
"red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel8",
"red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9",
"red_hat_openshift_dev_spaces:devspaces/dashboard-rhel9",
"red_hat_openshift_dev_spaces:devspaces/udi-base-rhel10",
"red_hat_openshift_dev_spaces:devspaces/udi-base-rhel9",
"red_hat_openshift_dev_spaces:devspaces/udi-rhel9",
"red_hat_single_sign-on_7:assertj-core",
"streams_for_apache_kafka_3:rocksdbjni.src"
]
},
{
"label": "vulnerable_code_not_in_execute_path",
"product_ids": [
"red_hat_openshift_dev_spaces:devspaces/devspaces-operator-bundle",
"streams_for_apache_kafka_2:assertj-core"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2433116"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in AssertJ. An XML External Entity (XXE) vulnerability exists in the `XmlStringPrettyFormatter` component, which is used by the `isXmlEqualTo(CharSequence)` assertion. If an application processes untrusted XML input using these methods, a remote attacker could exploit this flaw to read arbitrary local files, perform Server-Side Request Forgery (SSRF) by making the server request arbitrary URLs, or cause a Denial of Service (DoS) through entity expansion attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that a user processes untrusted content with the affected package.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.noarch",
"AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.src",
"AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.noarch",
"AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.src",
"AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.noarch",
"AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.src",
"AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.noarch",
"AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.src",
"AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.src",
"CRB-10.2.Z:assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch",
"Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16"
],
"known_affected": [
"openshift_serverless:openshift-serverless-1/kn-ekb-dispatcher-rhel9",
"openshift_serverless:openshift-serverless-1/kn-ekb-receiver-rhel9",
"red_hat_amq_clients:assertj-core",
"red_hat_build_of_apache_camel_-_hawtio_4:assertj-core",
"red_hat_build_of_debezium_2:assertj-core",
"red_hat_build_of_debezium_3:assertj-core",
"red_hat_build_of_optaplanner_8:assertj-core",
"red_hat_enterprise_linux_8:assertj-core-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:assertj-core.src::javapackages-tools:201801",
"red_hat_enterprise_linux_8:assertj-core::javapackages-tools:201801",
"red_hat_enterprise_linux_9:log4j-jcl",
"red_hat_enterprise_linux_9:log4j-slf4j",
"red_hat_enterprise_linux_9:log4j.src",
"red_hat_fuse_7:assertj-core",
"red_hat_jboss_enterprise_application_platform_8:assertj-core",
"red_hat_process_automation_7:assertj-core",
"streams_for_apache_kafka_3:assertj-core"
],
"known_not_affected": [
"red_hat_amq_broker_7:assertj-core",
"red_hat_build_of_apache_camel_4_for_quarkus_3:assertj-core",
"red_hat_build_of_apicurio_registry_3:assertj-core",
"red_hat_data_grid_8:assertj-core",
"red_hat_enterprise_linux_10:moditect-javadoc",
"red_hat_enterprise_linux_10:moditect.src",
"red_hat_enterprise_linux_8:log4j",
"red_hat_enterprise_linux_8:log4j-jcl",
"red_hat_enterprise_linux_8:log4j-slf4j",
"red_hat_enterprise_linux_8:log4j-web",
"red_hat_enterprise_linux_8:maven-failsafe-plugin::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-plugin::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-provider-junit::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-provider-testng::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-report-parser::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-report-plugin::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire.src::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-api-easymock::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-api-mockito::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-api-support::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-common::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-core::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-junit4::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-reflect::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-testng::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock.src::javapackages-tools:201801",
"red_hat_enterprise_linux_9:maven-enforcer-api",
"red_hat_enterprise_linux_9:maven-enforcer-plugin",
"red_hat_enterprise_linux_9:maven-enforcer-rules",
"red_hat_jboss_enterprise_application_platform_7:assertj-core",
"red_hat_jboss_enterprise_application_platform_expansion_pack:assertj-core",
"red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel8",
"red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9",
"red_hat_openshift_dev_spaces:devspaces/dashboard-rhel9",
"red_hat_openshift_dev_spaces:devspaces/devspaces-operator-bundle",
"red_hat_openshift_dev_spaces:devspaces/udi-base-rhel10",
"red_hat_openshift_dev_spaces:devspaces/udi-base-rhel9",
"red_hat_openshift_dev_spaces:devspaces/udi-rhel9",
"red_hat_single_sign-on_7:assertj-core",
"streams_for_apache_kafka_2:assertj-core",
"streams_for_apache_kafka_3:rocksdbjni.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-24400"
},
{
"category": "external",
"summary": "RHBZ#2433116",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433116"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-24400",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24400"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24400",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24400"
},
{
"category": "external",
"summary": "https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html",
"url": "https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html"
},
{
"category": "external",
"summary": "https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a",
"url": "https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a"
},
{
"category": "external",
"summary": "https://github.com/assertj/assertj/releases/tag/assertj-build-3.27.7",
"url": "https://github.com/assertj/assertj/releases/tag/assertj-build-3.27.7"
},
{
"category": "external",
"summary": "https://github.com/assertj/assertj/security/advisories/GHSA-rqfh-9r24-8c9r",
"url": "https://github.com/assertj/assertj/security/advisories/GHSA-rqfh-9r24-8c9r"
}
],
"release_date": "2026-01-26T22:19:02.161000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-25T12:49:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.noarch",
"AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.src",
"CRB-10.2.Z:assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59372"
},
{
"category": "vendor_fix",
"date": "2026-08-24T10:53:32+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.noarch",
"AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.src"
],
"url": "https://access.redhat.com/errata/RHSA-2026:58956"
},
{
"category": "vendor_fix",
"date": "2026-08-24T11:05:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.noarch",
"AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.src"
],
"url": "https://access.redhat.com/errata/RHSA-2026:58957"
},
{
"category": "vendor_fix",
"date": "2026-08-24T11:00:58+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.noarch",
"AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.src"
],
"url": "https://access.redhat.com/errata/RHSA-2026:58949"
},
{
"category": "vendor_fix",
"date": "2026-08-26T12:06:03+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.src"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60215"
},
{
"category": "vendor_fix",
"date": "2026-07-09T15:29:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37390"
},
{
"category": "no_fix_planned",
"details": "Will not fix",
"product_ids": [
"red_hat_build_of_debezium_3:assertj-core",
"red_hat_enterprise_linux_8:assertj-core-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:assertj-core.src::javapackages-tools:201801",
"red_hat_enterprise_linux_8:assertj-core::javapackages-tools:201801",
"red_hat_enterprise_linux_9:log4j-jcl",
"red_hat_enterprise_linux_9:log4j-slf4j",
"red_hat_enterprise_linux_9:log4j.src",
"red_hat_fuse_7:assertj-core",
"red_hat_jboss_enterprise_application_platform_8:assertj-core",
"streams_for_apache_kafka_3:assertj-core"
]
},
{
"category": "none_available",
"details": "Affected",
"product_ids": [
"openshift_serverless:openshift-serverless-1/kn-ekb-dispatcher-rhel9",
"openshift_serverless:openshift-serverless-1/kn-ekb-receiver-rhel9",
"red_hat_amq_clients:assertj-core",
"red_hat_build_of_apache_camel_-_hawtio_4:assertj-core",
"red_hat_build_of_debezium_2:assertj-core",
"red_hat_build_of_optaplanner_8:assertj-core",
"red_hat_process_automation_7:assertj-core"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.noarch",
"AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.src",
"AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.noarch",
"AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.src",
"AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.noarch",
"AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.src",
"AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.noarch",
"AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.src",
"AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.src",
"CRB-10.2.Z:assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch",
"Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16",
"openshift_serverless:openshift-serverless-1/kn-ekb-dispatcher-rhel9",
"openshift_serverless:openshift-serverless-1/kn-ekb-receiver-rhel9",
"red_hat_amq_broker_7:assertj-core",
"red_hat_amq_clients:assertj-core",
"red_hat_build_of_apache_camel_-_hawtio_4:assertj-core",
"red_hat_build_of_apache_camel_4_for_quarkus_3:assertj-core",
"red_hat_build_of_apicurio_registry_3:assertj-core",
"red_hat_build_of_debezium_2:assertj-core",
"red_hat_build_of_debezium_3:assertj-core",
"red_hat_build_of_optaplanner_8:assertj-core",
"red_hat_data_grid_8:assertj-core",
"red_hat_enterprise_linux_10:moditect-javadoc",
"red_hat_enterprise_linux_10:moditect.src",
"red_hat_enterprise_linux_8:assertj-core-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:assertj-core.src::javapackages-tools:201801",
"red_hat_enterprise_linux_8:assertj-core::javapackages-tools:201801",
"red_hat_enterprise_linux_8:log4j",
"red_hat_enterprise_linux_8:log4j-jcl",
"red_hat_enterprise_linux_8:log4j-slf4j",
"red_hat_enterprise_linux_8:log4j-web",
"red_hat_enterprise_linux_8:maven-failsafe-plugin::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-plugin::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-provider-junit::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-provider-testng::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-report-parser::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-report-plugin::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire.src::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-api-easymock::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-api-mockito::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-api-support::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-common::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-core::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-junit4::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-reflect::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-testng::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock.src::javapackages-tools:201801",
"red_hat_enterprise_linux_9:log4j-jcl",
"red_hat_enterprise_linux_9:log4j-slf4j",
"red_hat_enterprise_linux_9:log4j.src",
"red_hat_enterprise_linux_9:maven-enforcer-api",
"red_hat_enterprise_linux_9:maven-enforcer-plugin",
"red_hat_enterprise_linux_9:maven-enforcer-rules",
"red_hat_fuse_7:assertj-core",
"red_hat_jboss_enterprise_application_platform_7:assertj-core",
"red_hat_jboss_enterprise_application_platform_8:assertj-core",
"red_hat_jboss_enterprise_application_platform_expansion_pack:assertj-core",
"red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel8",
"red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9",
"red_hat_openshift_dev_spaces:devspaces/dashboard-rhel9",
"red_hat_openshift_dev_spaces:devspaces/devspaces-operator-bundle",
"red_hat_openshift_dev_spaces:devspaces/udi-base-rhel10",
"red_hat_openshift_dev_spaces:devspaces/udi-base-rhel9",
"red_hat_openshift_dev_spaces:devspaces/udi-rhel9",
"red_hat_process_automation_7:assertj-core",
"red_hat_single_sign-on_7:assertj-core",
"streams_for_apache_kafka_2:assertj-core",
"streams_for_apache_kafka_3:assertj-core",
"streams_for_apache_kafka_3:rocksdbjni.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate",
"product_ids": [
"AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.noarch",
"AppStream-10.2.Z:assertj-core-0:3.24.2-9.el10_2.1.src",
"AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.noarch",
"AppStream-9.2.0.Z.E4S:assertj-core-0:3.19.0-5.el9_2.2.src",
"AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.noarch",
"AppStream-9.4.0.Z.E4S:assertj-core-0:3.19.0-5.el9_4.2.src",
"AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.noarch",
"AppStream-9.6.0.Z.EUS:assertj-core-0:3.19.0-9.el9_6.1.src",
"AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:assertj-core-0:3.19.0-9.el9_8.1.src",
"CRB-10.2.Z:assertj-core-javadoc-0:3.24.2-9.el10_2.1.noarch",
"Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16",
"openshift_serverless:openshift-serverless-1/kn-ekb-dispatcher-rhel9",
"openshift_serverless:openshift-serverless-1/kn-ekb-receiver-rhel9",
"red_hat_amq_broker_7:assertj-core",
"red_hat_amq_clients:assertj-core",
"red_hat_build_of_apache_camel_-_hawtio_4:assertj-core",
"red_hat_build_of_apache_camel_4_for_quarkus_3:assertj-core",
"red_hat_build_of_apicurio_registry_3:assertj-core",
"red_hat_build_of_debezium_2:assertj-core",
"red_hat_build_of_debezium_3:assertj-core",
"red_hat_build_of_optaplanner_8:assertj-core",
"red_hat_data_grid_8:assertj-core",
"red_hat_enterprise_linux_10:moditect-javadoc",
"red_hat_enterprise_linux_10:moditect.src",
"red_hat_enterprise_linux_8:assertj-core-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:assertj-core.src::javapackages-tools:201801",
"red_hat_enterprise_linux_8:assertj-core::javapackages-tools:201801",
"red_hat_enterprise_linux_8:log4j",
"red_hat_enterprise_linux_8:log4j-jcl",
"red_hat_enterprise_linux_8:log4j-slf4j",
"red_hat_enterprise_linux_8:log4j-web",
"red_hat_enterprise_linux_8:maven-failsafe-plugin::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-plugin::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-provider-junit::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-provider-testng::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-report-parser::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire-report-plugin::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire.src::javapackages-tools:201801",
"red_hat_enterprise_linux_8:maven-surefire::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-api-easymock::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-api-mockito::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-api-support::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-common::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-core::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-javadoc::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-junit4::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-reflect::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock-testng::javapackages-tools:201801",
"red_hat_enterprise_linux_8:powermock.src::javapackages-tools:201801",
"red_hat_enterprise_linux_9:log4j-jcl",
"red_hat_enterprise_linux_9:log4j-slf4j",
"red_hat_enterprise_linux_9:log4j.src",
"red_hat_enterprise_linux_9:maven-enforcer-api",
"red_hat_enterprise_linux_9:maven-enforcer-plugin",
"red_hat_enterprise_linux_9:maven-enforcer-rules",
"red_hat_fuse_7:assertj-core",
"red_hat_jboss_enterprise_application_platform_7:assertj-core",
"red_hat_jboss_enterprise_application_platform_8:assertj-core",
"red_hat_jboss_enterprise_application_platform_expansion_pack:assertj-core",
"red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel8",
"red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-service-rhel9",
"red_hat_openshift_dev_spaces:devspaces/dashboard-rhel9",
"red_hat_openshift_dev_spaces:devspaces/devspaces-operator-bundle",
"red_hat_openshift_dev_spaces:devspaces/udi-base-rhel10",
"red_hat_openshift_dev_spaces:devspaces/udi-base-rhel9",
"red_hat_openshift_dev_spaces:devspaces/udi-rhel9",
"red_hat_process_automation_7:assertj-core",
"red_hat_single_sign-on_7:assertj-core",
"streams_for_apache_kafka_2:assertj-core",
"streams_for_apache_kafka_3:assertj-core",
"streams_for_apache_kafka_3:rocksdbjni.src"
]
}
],
"title": "assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE)"
}
]
}
Enrichment data
Aggregated bundle (all enrichments)