{"url":"http://public2.vulnerablecode.io/api/packages/1056158?format=json","purl":"pkg:rpm/redhat/git-lfs@3.6.1-8?arch=el10_1","type":"rpm","namespace":"redhat","name":"git-lfs","version":"3.6.1-8","qualifiers":{"arch":"el10_1"},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":null,"latest_non_vulnerable_version":null,"affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/64346?format=json","vulnerability_id":"VCID-pcez-y67t-8yg3","summary":"net/url: Incorrect parsing of IPv6 host literals in net/url","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-25679.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-25679.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2026-25679","reference_id":"","reference_type":"","scores":[{"value":"0.00031","scoring_system":"epss","scoring_elements":"0.08816","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00031","scoring_system":"epss","scoring_elements":"0.08768","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00033","scoring_system":"epss","scoring_elements":"0.09672","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00033","scoring_system":"epss","scoring_elements":"0.09743","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00033","scoring_system":"epss","scoring_elements":"0.09793","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00033","scoring_system":"epss","scoring_elements":"0.09802","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00033","scoring_system":"epss","scoring_elements":"0.09771","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00033","scoring_system":"epss","scoring_elements":"0.09754","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00033","scoring_system":"epss","scoring_elements":"0.0964","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00033","scoring_system":"epss","scoring_elements":"0.09612","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00051","scoring_system":"epss","scoring_elements":"0.15881","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00052","scoring_system":"epss","scoring_elements":"0.15973","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00052","scoring_system":"epss","scoring_elements":"0.15853","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00052","scoring_system":"epss","scoring_elements":"0.16017","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00052","scoring_system":"epss","scoring_elements":"0.16013","published_at":"2026-04-26T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-25679"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"3.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445356","reference_id":"2445356","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445356"},{"reference_url":"https://go.dev/cl/752180","reference_id":"752180","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-10T13:36:26Z/"}],"url":"https://go.dev/cl/752180"},{"reference_url":"https://go.dev/issue/77578","reference_id":"77578","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-10T13:36:26Z/"}],"url":"https://go.dev/issue/77578"},{"reference_url":"https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk","reference_id":"EdhZqrQ98hk","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-10T13:36:26Z/"}],"url":"https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"},{"reference_url":"https://pkg.go.dev/vuln/GO-2026-4601","reference_id":"GO-2026-4601","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-10T13:36:26Z/"}],"url":"https://pkg.go.dev/vuln/GO-2026-4601"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10065","reference_id":"RHSA-2026:10065","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10065"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10125","reference_id":"RHSA-2026:10125","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10125"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10133","reference_id":"RHSA-2026:10133","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10133"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10140","reference_id":"RHSA-2026:10140","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10140"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10141","reference_id":"RHSA-2026:10141","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10141"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10158","reference_id":"RHSA-2026:10158","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10158"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10169","reference_id":"RHSA-2026:10169","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10169"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10175","reference_id":"RHSA-2026:10175","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10175"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10184","reference_id":"RHSA-2026:10184","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10184"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10225","reference_id":"RHSA-2026:10225","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10225"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10250","reference_id":"RHSA-2026:10250","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10250"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10701","reference_id":"RHSA-2026:10701","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10701"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10712","reference_id":"RHSA-2026:10712","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10712"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10929","reference_id":"RHSA-2026:10929","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10929"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11331","reference_id":"RHSA-2026:11331","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11331"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11375","reference_id":"RHSA-2026:11375","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11375"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11412","reference_id":"RHSA-2026:11412","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11412"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11413","reference_id":"RHSA-2026:11413","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11413"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11686","reference_id":"RHSA-2026:11686","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11686"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11688","reference_id":"RHSA-2026:11688","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11688"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11747","reference_id":"RHSA-2026:11747","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11747"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11749","reference_id":"RHSA-2026:11749","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11749"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11768","reference_id":"RHSA-2026:11768","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11768"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11800","reference_id":"RHSA-2026:11800","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11800"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11856","reference_id":"RHSA-2026:11856","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11856"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11916","reference_id":"RHSA-2026:11916","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11916"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11996","reference_id":"RHSA-2026:11996","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11996"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:12028","reference_id":"RHSA-2026:12028","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:12028"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:12029","reference_id":"RHSA-2026:12029","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:12029"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:12030","reference_id":"RHSA-2026:12030","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:12030"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:12031","reference_id":"RHSA-2026:12031","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:12031"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:12032","reference_id":"RHSA-2026:12032","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:12032"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:12033","reference_id":"RHSA-2026:12033","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:12033"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:12282","reference_id":"RHSA-2026:12282","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:12282"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13508","reference_id":"RHSA-2026:13508","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13508"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13512","reference_id":"RHSA-2026:13512","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13512"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13545","reference_id":"RHSA-2026:13545","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13545"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13642","reference_id":"RHSA-2026:13642","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13642"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13643","reference_id":"RHSA-2026:13643","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13643"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13671","reference_id":"RHSA-2026:13671","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13671"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:14020","reference_id":"RHSA-2026:14020","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:14020"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5110","reference_id":"RHSA-2026:5110","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5110"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5549","reference_id":"RHSA-2026:5549","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5549"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5941","reference_id":"RHSA-2026:5941","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5941"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5942","reference_id":"RHSA-2026:5942","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5942"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5943","reference_id":"RHSA-2026:5943","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5943"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:5944","reference_id":"RHSA-2026:5944","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:5944"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:6341","reference_id":"RHSA-2026:6341","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:6341"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:6344","reference_id":"RHSA-2026:6344","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:6344"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:6382","reference_id":"RHSA-2026:6382","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:6382"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:6383","reference_id":"RHSA-2026:6383","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:6383"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:6388","reference_id":"RHSA-2026:6388","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:6388"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:6564","reference_id":"RHSA-2026:6564","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:6564"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:6720","reference_id":"RHSA-2026:6720","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:6720"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:6802","reference_id":"RHSA-2026:6802","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:6802"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:6949","reference_id":"RHSA-2026:6949","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:6949"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7005","reference_id":"RHSA-2026:7005","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7005"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7009","reference_id":"RHSA-2026:7009","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7009"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7011","reference_id":"RHSA-2026:7011","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7011"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7259","reference_id":"RHSA-2026:7259","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7259"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7315","reference_id":"RHSA-2026:7315","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7315"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7328","reference_id":"RHSA-2026:7328","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7328"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7665","reference_id":"RHSA-2026:7665","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7665"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7669","reference_id":"RHSA-2026:7669","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7669"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7674","reference_id":"RHSA-2026:7674","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7674"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7833","reference_id":"RHSA-2026:7833","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7833"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7834","reference_id":"RHSA-2026:7834","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7834"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7876","reference_id":"RHSA-2026:7876","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7876"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7877","reference_id":"RHSA-2026:7877","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7877"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7878","reference_id":"RHSA-2026:7878","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7878"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7879","reference_id":"RHSA-2026:7879","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7879"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7883","reference_id":"RHSA-2026:7883","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7883"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:7992","reference_id":"RHSA-2026:7992","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:7992"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8151","reference_id":"RHSA-2026:8151","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8151"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8167","reference_id":"RHSA-2026:8167","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8167"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8314","reference_id":"RHSA-2026:8314","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8314"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8322","reference_id":"RHSA-2026:8322","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8322"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8324","reference_id":"RHSA-2026:8324","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8324"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8337","reference_id":"RHSA-2026:8337","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8337"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8338","reference_id":"RHSA-2026:8338","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8338"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8433","reference_id":"RHSA-2026:8433","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8433"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8434","reference_id":"RHSA-2026:8434","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8434"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8456","reference_id":"RHSA-2026:8456","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8456"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8483","reference_id":"RHSA-2026:8483","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8483"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8484","reference_id":"RHSA-2026:8484","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8484"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8490","reference_id":"RHSA-2026:8490","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8490"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8491","reference_id":"RHSA-2026:8491","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8491"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8493","reference_id":"RHSA-2026:8493","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8493"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8840","reference_id":"RHSA-2026:8840","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8840"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8841","reference_id":"RHSA-2026:8841","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8841"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8842","reference_id":"RHSA-2026:8842","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8842"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8845","reference_id":"RHSA-2026:8845","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8845"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8847","reference_id":"RHSA-2026:8847","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8847"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8848","reference_id":"RHSA-2026:8848","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8848"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8849","reference_id":"RHSA-2026:8849","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8849"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8851","reference_id":"RHSA-2026:8851","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8851"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8852","reference_id":"RHSA-2026:8852","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8852"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8853","reference_id":"RHSA-2026:8853","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8853"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8855","reference_id":"RHSA-2026:8855","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8855"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8856","reference_id":"RHSA-2026:8856","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8856"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8860","reference_id":"RHSA-2026:8860","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8860"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8877","reference_id":"RHSA-2026:8877","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8877"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8878","reference_id":"RHSA-2026:8878","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8878"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8879","reference_id":"RHSA-2026:8879","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8879"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8881","reference_id":"RHSA-2026:8881","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8881"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8882","reference_id":"RHSA-2026:8882","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8882"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8930","reference_id":"RHSA-2026:8930","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8930"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8931","reference_id":"RHSA-2026:8931","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8931"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8949","reference_id":"RHSA-2026:8949","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8949"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9043","reference_id":"RHSA-2026:9043","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9043"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9044","reference_id":"RHSA-2026:9044","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9044"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9052","reference_id":"RHSA-2026:9052","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9052"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9090","reference_id":"RHSA-2026:9090","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9090"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9093","reference_id":"RHSA-2026:9093","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9093"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9094","reference_id":"RHSA-2026:9094","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9094"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9097","reference_id":"RHSA-2026:9097","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9097"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9098","reference_id":"RHSA-2026:9098","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9098"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9108","reference_id":"RHSA-2026:9108","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9108"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9109","reference_id":"RHSA-2026:9109","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9109"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9385","reference_id":"RHSA-2026:9385","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9385"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9434","reference_id":"RHSA-2026:9434","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9434"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9435","reference_id":"RHSA-2026:9435","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9435"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9436","reference_id":"RHSA-2026:9436","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9436"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9439","reference_id":"RHSA-2026:9439","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9439"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9440","reference_id":"RHSA-2026:9440","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9440"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9448","reference_id":"RHSA-2026:9448","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9448"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9453","reference_id":"RHSA-2026:9453","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9453"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9461","reference_id":"RHSA-2026:9461","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9461"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9695","reference_id":"RHSA-2026:9695","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9695"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9742","reference_id":"RHSA-2026:9742","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9742"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:9872","reference_id":"RHSA-2026:9872","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:9872"}],"fixed_packages":[],"aliases":["CVE-2026-25679"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pcez-y67t-8yg3"}],"fixing_vulnerabilities":[],"risk_score":"3.4","resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/git-lfs@3.6.1-8%3Farch=el10_1"}