{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11998.json" } ], "title": "angularjs: AngularJS: Arbitrary JavaScript execution due to Strict Contextual Escaping (SCE) bypass", "tracking": { "current_release_date": "2026-08-05T08:58:10+00:00", "generator": { "date": "2026-08-05T08:58:10+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.8" } }, "id": "CVE-2026-11998", "initial_release_date": "2026-06-24T20:29:37.188000+00:00", "revision_history": [ { "date": "2026-06-24T20:29:37.188000+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-06-29T22:02:53.976814+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-08-05T08:58:10+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 10", "product": { "name": "Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 7", "product": { "name": "Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 7" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 8", "product": { "name": "Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 9", "product": { "name": "Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "category": "product_name", "name": "Red Hat Fuse 7", "product": { "name": "Red Hat Fuse 7", "product_id": "red_hat_fuse_7", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_fuse:7" } } } ], "category": "product_family", "name": "Red Hat Fuse 7" }, { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack", "product": { "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack", "product_identification_helper": { "cpe": "cpe:/a:redhat:jbosseapxp" } } } ], "category": "product_family", "name": "Red Hat JBoss Enterprise Application Platform Expansion Pack" }, { "branches": [ { "category": "product_name", "name": "Red Hat OpenStack Platform 16.2", "product": { "name": "Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:16.2" } } } ], "category": "product_family", "name": "Red Hat OpenStack Platform 16.2" }, { "branches": [ { "category": "product_name", "name": "Red Hat Quay 3", "product": { "name": "Red Hat Quay 3", "product_id": "red_hat_quay_3", "product_identification_helper": { "cpe": "cpe:/a:redhat:quay:3" } } } ], "category": "product_family", "name": "Red Hat Quay 3" }, { "branches": [ { "category": "product_name", "name": "Red Hat Single Sign-On 7", "product": { "name": "Red Hat Single Sign-On 7", "product_id": "red_hat_single_sign-on_7", "product_identification_helper": { "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7" } } } ], "category": "product_family", "name": "Red Hat Single Sign-On 7" }, { "category": "product_version", "name": "firefox.src", "product": { "name": "firefox.src", "product_id": "firefox.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/firefox?arch=src" } } }, { "category": "product_version", "name": "firefox", "product": { "name": "firefox", "product_id": "firefox", "product_identification_helper": { "purl": "pkg:rpm/redhat/firefox" } } }, { "category": "product_version", "name": "gjs.src", "product": { "name": "gjs.src", "product_id": "gjs.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/gjs?arch=src" } } }, { "category": "product_version", "name": "gjs-devel", "product": { "name": "gjs-devel", "product_id": "gjs-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/gjs-devel" } } }, { "category": "product_version", "name": "grafana-selinux", "product": { "name": "grafana-selinux", "product_id": "grafana-selinux", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-selinux" } } }, { "category": "product_version", "name": "grafana.src", "product": { "name": "grafana.src", "product_id": "grafana.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana?arch=src" } } }, { "category": "product_version", "name": "grafana", "product": { "name": "grafana", "product_id": "grafana", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana" } } }, { "category": "product_version", "name": "thunderbird.src", "product": { "name": "thunderbird.src", "product_id": "thunderbird.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/thunderbird?arch=src" } } }, { "category": "product_version", "name": "thunderbird", "product": { "name": "thunderbird", "product_id": "thunderbird", "product_identification_helper": { "purl": "pkg:rpm/redhat/thunderbird" } } }, { "category": "product_version", "name": "grafana-stackdriver", "product": { "name": "grafana-stackdriver", "product_id": "grafana-stackdriver", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-stackdriver" } } }, { "category": "product_version", "name": "grafana-opentsdb", "product": { "name": "grafana-opentsdb", "product_id": "grafana-opentsdb", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-opentsdb" } } }, { "category": "product_version", "name": "grafana-elasticsearch", "product": { "name": "grafana-elasticsearch", "product_id": "grafana-elasticsearch", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-elasticsearch" } } }, { "category": "product_version", "name": "grafana-mssql", "product": { "name": "grafana-mssql", "product_id": "grafana-mssql", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-mssql" } } }, { "category": "product_version", "name": "grafana-influxdb", "product": { "name": "grafana-influxdb", "product_id": "grafana-influxdb", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-influxdb" } } }, { "category": "product_version", "name": "grafana-loki", "product": { "name": "grafana-loki", "product_id": "grafana-loki", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-loki" } } }, { "category": "product_version", "name": "grafana-postgres", "product": { "name": "grafana-postgres", "product_id": "grafana-postgres", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-postgres" } } }, { "category": "product_version", "name": "grafana-mysql", "product": { "name": "grafana-mysql", "product_id": "grafana-mysql", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-mysql" } } }, { "category": "product_version", "name": "grafana-graphite", "product": { "name": "grafana-graphite", "product_id": "grafana-graphite", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-graphite" } } }, { "category": "product_version", "name": "grafana-prometheus", "product": { "name": "grafana-prometheus", "product_id": "grafana-prometheus", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-prometheus" } } }, { "category": "product_version", "name": "grafana-azure-monitor", "product": { "name": "grafana-azure-monitor", "product_id": "grafana-azure-monitor", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-azure-monitor" } } }, { "category": "product_version", "name": "grafana-cloudwatch", "product": { "name": "grafana-cloudwatch", "product_id": "grafana-cloudwatch", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-cloudwatch" } } }, { "category": "product_version", "name": "mozjs60-devel", "product": { "name": "mozjs60-devel", "product_id": "mozjs60-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/mozjs60-devel" } } }, { "category": "product_version", "name": "mozjs60.src", "product": { "name": "mozjs60.src", "product_id": "mozjs60.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/mozjs60?arch=src" } } }, { "category": "product_version", "name": "mozjs60", "product": { "name": "mozjs60", "product_id": "mozjs60", "product_identification_helper": { "purl": "pkg:rpm/redhat/mozjs60" } } }, { "category": "product_version", "name": "firefox-x11", "product": { "name": "firefox-x11", "product_id": "firefox-x11", "product_identification_helper": { "purl": "pkg:rpm/redhat/firefox-x11" } } }, { "category": "product_version", "name": "angular", "product": { "name": "angular", "product_id": "angular", "product_identification_helper": { "purl": "pkg:npm/angular" } } }, { "category": "product_version", "name": "qpid-dispatch-router", "product": { "name": "qpid-dispatch-router", "product_id": "qpid-dispatch-router", "product_identification_helper": { "purl": "pkg:rpm/redhat/qpid-dispatch-router" } } }, { "category": "product_version", "name": "qpid-dispatch-tools", "product": { "name": "qpid-dispatch-tools", "product_id": "qpid-dispatch-tools", "product_identification_helper": { "purl": "pkg:rpm/redhat/qpid-dispatch-tools" } } }, { "category": "product_version", "name": "quay/quay-rhel8", "product": { "name": "quay/quay-rhel8", "product_id": "quay/quay-rhel8", "product_identification_helper": { "purl": "pkg:oci/quay-rhel8?repository_url=registry.redhat.io/quay/quay-rhel8" } } }, { "category": "product_version", "name": "quay/quay-rhel9", "product": { "name": "quay/quay-rhel9", "product_id": "quay/quay-rhel9", "product_identification_helper": { "purl": "pkg:oci/quay-rhel9?repository_url=registry.redhat.io/quay/quay-rhel9" } } } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "firefox as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:firefox" }, "product_reference": "firefox", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "firefox.src as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:firefox.src" }, "product_reference": "firefox.src", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "gjs-devel as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:gjs-devel" }, "product_reference": "gjs-devel", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "gjs.src as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:gjs.src" }, "product_reference": "gjs.src", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "grafana as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:grafana" }, "product_reference": "grafana", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-selinux as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:grafana-selinux" }, "product_reference": "grafana-selinux", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "grafana.src as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:grafana.src" }, "product_reference": "grafana.src", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:thunderbird" }, "product_reference": "thunderbird", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird.src as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:thunderbird.src" }, "product_reference": "thunderbird.src", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "firefox as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:firefox" }, "product_reference": "firefox", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "firefox.src as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:firefox.src" }, "product_reference": "firefox.src", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "grafana as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana" }, "product_reference": "grafana", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-azure-monitor as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-azure-monitor" }, "product_reference": "grafana-azure-monitor", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-cloudwatch as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-cloudwatch" }, "product_reference": "grafana-cloudwatch", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-elasticsearch as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-elasticsearch" }, "product_reference": "grafana-elasticsearch", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-graphite as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-graphite" }, "product_reference": "grafana-graphite", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-influxdb as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-influxdb" }, "product_reference": "grafana-influxdb", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-loki as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-loki" }, "product_reference": "grafana-loki", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-mssql as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-mssql" }, "product_reference": "grafana-mssql", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-mysql as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-mysql" }, "product_reference": "grafana-mysql", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-opentsdb as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-opentsdb" }, "product_reference": "grafana-opentsdb", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-postgres as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-postgres" }, "product_reference": "grafana-postgres", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-prometheus as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-prometheus" }, "product_reference": "grafana-prometheus", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-selinux as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-selinux" }, "product_reference": "grafana-selinux", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-stackdriver as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-stackdriver" }, "product_reference": "grafana-stackdriver", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana.src" }, "product_reference": "grafana.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "mozjs60 as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:mozjs60" }, "product_reference": "mozjs60", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "mozjs60-devel as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:mozjs60-devel" }, "product_reference": "mozjs60-devel", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "mozjs60.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:mozjs60.src" }, "product_reference": "mozjs60.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:thunderbird" }, "product_reference": "thunderbird", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:thunderbird.src" }, "product_reference": "thunderbird.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "firefox as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:firefox" }, "product_reference": "firefox", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:firefox-x11" }, "product_reference": "firefox-x11", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "firefox.src as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:firefox.src" }, "product_reference": "firefox.src", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gjs-devel as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gjs-devel" }, "product_reference": "gjs-devel", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "gjs.src as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:gjs.src" }, "product_reference": "gjs.src", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "grafana as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:grafana" }, "product_reference": "grafana", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-selinux as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:grafana-selinux" }, "product_reference": "grafana-selinux", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "grafana.src as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:grafana.src" }, "product_reference": "grafana.src", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:thunderbird" }, "product_reference": "thunderbird", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "thunderbird.src as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:thunderbird.src" }, "product_reference": "thunderbird.src", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "angular as a component of Red Hat Fuse 7", "product_id": "red_hat_fuse_7:angular" }, "product_reference": "angular", "relates_to_product_reference": "red_hat_fuse_7" }, { "category": "default_component_of", "full_product_name": { "name": "angular as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack", "product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:angular" }, "product_reference": "angular", "relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack" }, { "category": "default_component_of", "full_product_name": { "name": "qpid-dispatch-router as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:qpid-dispatch-router" }, "product_reference": "qpid-dispatch-router", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "qpid-dispatch-tools as a component of Red Hat OpenStack Platform 16.2", "product_id": "red_hat_openstack_platform_16.2:qpid-dispatch-tools" }, "product_reference": "qpid-dispatch-tools", "relates_to_product_reference": "red_hat_openstack_platform_16.2" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-rhel8 as a component of Red Hat Quay 3", "product_id": "red_hat_quay_3:quay/quay-rhel8" }, "product_reference": "quay/quay-rhel8", "relates_to_product_reference": "red_hat_quay_3" }, { "category": "default_component_of", "full_product_name": { "name": "quay/quay-rhel9 as a component of Red Hat Quay 3", "product_id": "red_hat_quay_3:quay/quay-rhel9" }, "product_reference": "quay/quay-rhel9", "relates_to_product_reference": "red_hat_quay_3" }, { "category": "default_component_of", "full_product_name": { "name": "angular as a component of Red Hat Single Sign-On 7", "product_id": "red_hat_single_sign-on_7:angular" }, "product_reference": "angular", "relates_to_product_reference": "red_hat_single_sign-on_7" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-11998", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "discovery_date": "2026-06-24T22:02:28.751489+00:00", "flags": [ { "label": "vulnerable_code_not_in_execute_path", "product_ids": [ "red_hat_enterprise_linux_10:firefox", "red_hat_enterprise_linux_10:firefox.src", "red_hat_enterprise_linux_10:grafana", "red_hat_enterprise_linux_10:grafana-selinux", "red_hat_enterprise_linux_10:grafana.src", "red_hat_enterprise_linux_10:thunderbird", "red_hat_enterprise_linux_10:thunderbird.src", "red_hat_enterprise_linux_7:firefox", "red_hat_enterprise_linux_7:firefox.src", "red_hat_enterprise_linux_8:grafana", "red_hat_enterprise_linux_8:grafana-azure-monitor", "red_hat_enterprise_linux_8:grafana-cloudwatch", "red_hat_enterprise_linux_8:grafana-elasticsearch", "red_hat_enterprise_linux_8:grafana-graphite", "red_hat_enterprise_linux_8:grafana-influxdb", "red_hat_enterprise_linux_8:grafana-loki", "red_hat_enterprise_linux_8:grafana-mssql", "red_hat_enterprise_linux_8:grafana-mysql", "red_hat_enterprise_linux_8:grafana-opentsdb", "red_hat_enterprise_linux_8:grafana-postgres", "red_hat_enterprise_linux_8:grafana-prometheus", "red_hat_enterprise_linux_8:grafana-selinux", "red_hat_enterprise_linux_8:grafana-stackdriver", "red_hat_enterprise_linux_8:grafana.src", "red_hat_enterprise_linux_8:thunderbird", "red_hat_enterprise_linux_8:thunderbird.src", "red_hat_enterprise_linux_9:firefox", "red_hat_enterprise_linux_9:firefox-x11", "red_hat_enterprise_linux_9:firefox.src", "red_hat_enterprise_linux_9:grafana", "red_hat_enterprise_linux_9:grafana-selinux", "red_hat_enterprise_linux_9:grafana.src", "red_hat_enterprise_linux_9:thunderbird", "red_hat_enterprise_linux_9:thunderbird.src" ] }, { "label": "vulnerable_code_not_present", "product_ids": [ "red_hat_enterprise_linux_10:gjs-devel", "red_hat_enterprise_linux_10:gjs.src", "red_hat_enterprise_linux_8:mozjs60", "red_hat_enterprise_linux_8:mozjs60-devel", "red_hat_enterprise_linux_8:mozjs60.src", "red_hat_enterprise_linux_9:gjs-devel", "red_hat_enterprise_linux_9:gjs.src", "red_hat_quay_3:quay/quay-rhel8", "red_hat_quay_3:quay/quay-rhel9" ] }, { "label": "vulnerable_code_cannot_be_controlled_by_adversary", "product_ids": [ "red_hat_fuse_7:angular", "red_hat_openstack_platform_16.2:qpid-dispatch-router", "red_hat_openstack_platform_16.2:qpid-dispatch-tools" ] }, { "label": "component_not_present", "product_ids": [ "red_hat_jboss_enterprise_application_platform_expansion_pack:angular" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2492579" } ], "notes": [ { "category": "description", "text": "A flaw was found in AngularJS. The Strict Contextual Escaping (SCE) logic, designed to ensure only trusted values are used in security-sensitive contexts like resource URLs, can be bypassed. This bypass allows an attacker to use unsafe values as resource URLs, leading to arbitrary JavaScript execution within the victim's browser session. This could result in information disclosure or other impacts depending on the executed script.", "title": "Vulnerability description" }, { "category": "summary", "text": "angularjs: AngularJS: Arbitrary JavaScript execution due to Strict Contextual Escaping (SCE) bypass", "title": "Vulnerability summary" }, { "category": "other", "text": "An Important flaw in AngularJS's Strict Contextual Escaping (SCE) logic allows for a bypass, enabling arbitrary JavaScript execution within a victim's browser session. This vulnerability arises because the SCE's URL matching logic can be partially circumvented, leading to the use of untrusted values in security-sensitive contexts. As AngularJS is an End-of-Life project, no upstream updates are available to address this issue, potentially impacting Red Hat products that bundle affected versions of AngularJS.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "red_hat_single_sign-on_7:angular" ], "known_not_affected": [ "red_hat_enterprise_linux_10:firefox", "red_hat_enterprise_linux_10:firefox.src", "red_hat_enterprise_linux_10:gjs-devel", "red_hat_enterprise_linux_10:gjs.src", "red_hat_enterprise_linux_10:grafana", "red_hat_enterprise_linux_10:grafana-selinux", "red_hat_enterprise_linux_10:grafana.src", "red_hat_enterprise_linux_10:thunderbird", "red_hat_enterprise_linux_10:thunderbird.src", "red_hat_enterprise_linux_7:firefox", "red_hat_enterprise_linux_7:firefox.src", "red_hat_enterprise_linux_8:grafana", "red_hat_enterprise_linux_8:grafana-azure-monitor", "red_hat_enterprise_linux_8:grafana-cloudwatch", "red_hat_enterprise_linux_8:grafana-elasticsearch", "red_hat_enterprise_linux_8:grafana-graphite", "red_hat_enterprise_linux_8:grafana-influxdb", "red_hat_enterprise_linux_8:grafana-loki", "red_hat_enterprise_linux_8:grafana-mssql", "red_hat_enterprise_linux_8:grafana-mysql", "red_hat_enterprise_linux_8:grafana-opentsdb", "red_hat_enterprise_linux_8:grafana-postgres", "red_hat_enterprise_linux_8:grafana-prometheus", "red_hat_enterprise_linux_8:grafana-selinux", "red_hat_enterprise_linux_8:grafana-stackdriver", "red_hat_enterprise_linux_8:grafana.src", "red_hat_enterprise_linux_8:mozjs60", "red_hat_enterprise_linux_8:mozjs60-devel", "red_hat_enterprise_linux_8:mozjs60.src", "red_hat_enterprise_linux_8:thunderbird", "red_hat_enterprise_linux_8:thunderbird.src", "red_hat_enterprise_linux_9:firefox", "red_hat_enterprise_linux_9:firefox-x11", "red_hat_enterprise_linux_9:firefox.src", "red_hat_enterprise_linux_9:gjs-devel", "red_hat_enterprise_linux_9:gjs.src", "red_hat_enterprise_linux_9:grafana", "red_hat_enterprise_linux_9:grafana-selinux", "red_hat_enterprise_linux_9:grafana.src", "red_hat_enterprise_linux_9:thunderbird", "red_hat_enterprise_linux_9:thunderbird.src", "red_hat_fuse_7:angular", "red_hat_jboss_enterprise_application_platform_expansion_pack:angular", "red_hat_openstack_platform_16.2:qpid-dispatch-router", "red_hat_openstack_platform_16.2:qpid-dispatch-tools", "red_hat_quay_3:quay/quay-rhel8", "red_hat_quay_3:quay/quay-rhel9" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-11998" }, { "category": "external", "summary": "RHBZ#2492579", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492579" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-11998", "url": "https://www.cve.org/CVERecord?id=CVE-2026-11998" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11998", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11998" }, { "category": "external", "summary": "https://codepen.io/herodevs/pen/JobQdmz/5b3896f56fab66f20cd25e698cf3faa8", "url": "https://codepen.io/herodevs/pen/JobQdmz/5b3896f56fab66f20cd25e698cf3faa8" }, { "category": "external", "summary": "https://www.herodevs.com/vulnerability-directory/cve-2026-11998", "url": "https://www.herodevs.com/vulnerability-directory/cve-2026-11998" } ], "release_date": "2026-06-24T20:29:37.188000+00:00", "remediations": [ { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "red_hat_single_sign-on_7:angular" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "red_hat_single_sign-on_7:angular" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L", "version": "3.1" }, "products": [ "red_hat_enterprise_linux_10:firefox", "red_hat_enterprise_linux_10:firefox.src", "red_hat_enterprise_linux_10:gjs-devel", "red_hat_enterprise_linux_10:gjs.src", "red_hat_enterprise_linux_10:grafana", "red_hat_enterprise_linux_10:grafana-selinux", "red_hat_enterprise_linux_10:grafana.src", "red_hat_enterprise_linux_10:thunderbird", "red_hat_enterprise_linux_10:thunderbird.src", "red_hat_enterprise_linux_7:firefox", "red_hat_enterprise_linux_7:firefox.src", "red_hat_enterprise_linux_8:grafana", "red_hat_enterprise_linux_8:grafana-azure-monitor", "red_hat_enterprise_linux_8:grafana-cloudwatch", "red_hat_enterprise_linux_8:grafana-elasticsearch", "red_hat_enterprise_linux_8:grafana-graphite", "red_hat_enterprise_linux_8:grafana-influxdb", "red_hat_enterprise_linux_8:grafana-loki", "red_hat_enterprise_linux_8:grafana-mssql", "red_hat_enterprise_linux_8:grafana-mysql", "red_hat_enterprise_linux_8:grafana-opentsdb", "red_hat_enterprise_linux_8:grafana-postgres", "red_hat_enterprise_linux_8:grafana-prometheus", "red_hat_enterprise_linux_8:grafana-selinux", "red_hat_enterprise_linux_8:grafana-stackdriver", "red_hat_enterprise_linux_8:grafana.src", "red_hat_enterprise_linux_8:mozjs60", "red_hat_enterprise_linux_8:mozjs60-devel", "red_hat_enterprise_linux_8:mozjs60.src", "red_hat_enterprise_linux_8:thunderbird", "red_hat_enterprise_linux_8:thunderbird.src", "red_hat_enterprise_linux_9:firefox", "red_hat_enterprise_linux_9:firefox-x11", "red_hat_enterprise_linux_9:firefox.src", "red_hat_enterprise_linux_9:gjs-devel", "red_hat_enterprise_linux_9:gjs.src", "red_hat_enterprise_linux_9:grafana", "red_hat_enterprise_linux_9:grafana-selinux", "red_hat_enterprise_linux_9:grafana.src", "red_hat_enterprise_linux_9:thunderbird", "red_hat_enterprise_linux_9:thunderbird.src", "red_hat_fuse_7:angular", "red_hat_jboss_enterprise_application_platform_expansion_pack:angular", "red_hat_openstack_platform_16.2:qpid-dispatch-router", "red_hat_openstack_platform_16.2:qpid-dispatch-tools", "red_hat_quay_3:quay/quay-rhel8", "red_hat_quay_3:quay/quay-rhel9", "red_hat_single_sign-on_7:angular" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "red_hat_enterprise_linux_10:firefox", "red_hat_enterprise_linux_10:firefox.src", "red_hat_enterprise_linux_10:gjs-devel", "red_hat_enterprise_linux_10:gjs.src", "red_hat_enterprise_linux_10:grafana", "red_hat_enterprise_linux_10:grafana-selinux", "red_hat_enterprise_linux_10:grafana.src", "red_hat_enterprise_linux_10:thunderbird", "red_hat_enterprise_linux_10:thunderbird.src", "red_hat_enterprise_linux_7:firefox", "red_hat_enterprise_linux_7:firefox.src", "red_hat_enterprise_linux_8:grafana", "red_hat_enterprise_linux_8:grafana-azure-monitor", "red_hat_enterprise_linux_8:grafana-cloudwatch", "red_hat_enterprise_linux_8:grafana-elasticsearch", "red_hat_enterprise_linux_8:grafana-graphite", "red_hat_enterprise_linux_8:grafana-influxdb", "red_hat_enterprise_linux_8:grafana-loki", "red_hat_enterprise_linux_8:grafana-mssql", "red_hat_enterprise_linux_8:grafana-mysql", "red_hat_enterprise_linux_8:grafana-opentsdb", "red_hat_enterprise_linux_8:grafana-postgres", "red_hat_enterprise_linux_8:grafana-prometheus", "red_hat_enterprise_linux_8:grafana-selinux", "red_hat_enterprise_linux_8:grafana-stackdriver", "red_hat_enterprise_linux_8:grafana.src", "red_hat_enterprise_linux_8:mozjs60", "red_hat_enterprise_linux_8:mozjs60-devel", "red_hat_enterprise_linux_8:mozjs60.src", "red_hat_enterprise_linux_8:thunderbird", "red_hat_enterprise_linux_8:thunderbird.src", "red_hat_enterprise_linux_9:firefox", "red_hat_enterprise_linux_9:firefox-x11", "red_hat_enterprise_linux_9:firefox.src", "red_hat_enterprise_linux_9:gjs-devel", "red_hat_enterprise_linux_9:gjs.src", "red_hat_enterprise_linux_9:grafana", "red_hat_enterprise_linux_9:grafana-selinux", "red_hat_enterprise_linux_9:grafana.src", "red_hat_enterprise_linux_9:thunderbird", "red_hat_enterprise_linux_9:thunderbird.src", "red_hat_fuse_7:angular", "red_hat_jboss_enterprise_application_platform_expansion_pack:angular", "red_hat_openstack_platform_16.2:qpid-dispatch-router", "red_hat_openstack_platform_16.2:qpid-dispatch-tools", "red_hat_quay_3:quay/quay-rhel8", "red_hat_quay_3:quay/quay-rhel9", "red_hat_single_sign-on_7:angular" ] } ], "title": "angularjs: AngularJS: Arbitrary JavaScript execution due to Strict Contextual Escaping (SCE) bypass" } ] }