{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44573.json"
      }
    ],
    "title": "next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n",
    "tracking": {
      "current_release_date": "2026-08-12T19:40:10+00:00",
      "generator": {
        "date": "2026-08-12T19:40:10+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.14"
        }
      },
      "id": "CVE-2026-44573",
      "initial_release_date": "2026-05-13T16:48:16.218000+00:00",
      "revision_history": [
        {
          "date": "2026-05-13T16:48:16.218000+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-10T11:00:52.758843+00:00",
          "number": "2",
          "summary": "Current version"
        },
        {
          "date": "2026-08-12T19:40:10+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 10",
                "product": {
                  "name": "Red Hat Enterprise Linux 10",
                  "product_id": "red_hat_enterprise_linux_10",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 10"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 7",
                "product": {
                  "name": "Red Hat Enterprise Linux 7",
                  "product_id": "red_hat_enterprise_linux_7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 7"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 8",
                "product": {
                  "name": "Red Hat Enterprise Linux 8",
                  "product_id": "red_hat_enterprise_linux_8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 8"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 9",
                "product": {
                  "name": "Red Hat Enterprise Linux 9",
                  "product_id": "red_hat_enterprise_linux_9",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 9"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                "product": {
                  "name": "Red Hat Enterprise Linux AI (RHEL AI) 3",
                  "product_id": "red_hat_enterprise_linux_ai_(rhel_ai)_3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux_ai:3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux AI (RHEL AI) 3"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Streams for Apache Kafka 3.2.1",
                "product": {
                  "name": "Streams for Apache Kafka 3.2.1",
                  "product_id": "Streams for Apache Kafka 3.2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:amq_streams:3.2::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Streams for Apache Kafka 2.9.4",
                "product": {
                  "name": "Streams for Apache Kafka 2.9.4",
                  "product_id": "Streams for Apache Kafka 2.9.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:amq_streams:2.9::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Trusted Artifact Signer 1.3",
                "product": {
                  "name": "Red Hat Trusted Artifact Signer 1.3",
                  "product_id": "Red Hat Trusted Artifact Signer 1.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Trusted Artifact Signer 1.4",
                "product": {
                  "name": "Red Hat Trusted Artifact Signer 1.4",
                  "product_id": "Red Hat Trusted Artifact Signer 1.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Trusted Artifact Signer"
          },
          {
            "category": "product_version",
            "name": "firefox.src",
            "product": {
              "name": "firefox.src",
              "product_id": "firefox.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox",
            "product": {
              "name": "firefox",
              "product_id": "firefox",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox"
              }
            }
          },
          {
            "category": "product_version",
            "name": "thunderbird.src",
            "product": {
              "name": "thunderbird.src",
              "product_id": "thunderbird.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/thunderbird?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "thunderbird",
            "product": {
              "name": "thunderbird",
              "product_id": "thunderbird",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/thunderbird"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox-x11",
            "product": {
              "name": "firefox-x11",
              "product_id": "firefox-x11",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox-x11"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhelai3/bootc-cuda-rhel9",
            "product": {
              "name": "rhelai3/bootc-cuda-rhel9",
              "product_id": "rhelai3/bootc-cuda-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/bootc-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhelai3/bootc-gaudi-rhel9",
            "product": {
              "name": "rhelai3/bootc-gaudi-rhel9",
              "product_id": "rhelai3/bootc-gaudi-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/bootc-gaudi-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-gaudi-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhelai3/bootc-rocm-rhel9",
            "product": {
              "name": "rhelai3/bootc-rocm-rhel9",
              "product_id": "rhelai3/bootc-rocm-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/bootc-rocm-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-rocm-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rhelai3/disk-image-cuda-rhel9",
            "product": {
              "name": "rhelai3/disk-image-cuda-rhel9",
              "product_id": "rhelai3/disk-image-cuda-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/disk-image-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/disk-image-cuda-rhel9"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
                  "product_id": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rekor-backfill-redis-rhel9@sha256%3A28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c?arch=amd64&repository_url=registry.redhat.io/rhtas/rekor-backfill-redis-rhel9&tag=1783969365"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
                  "product_id": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/certificate-transparency-rhel9@sha256%3Ab713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab?arch=amd64&repository_url=registry.redhat.io/rhtas/certificate-transparency-rhel9&tag=1783968468"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
                  "product_id": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/trillian-database-rhel9@sha256%3Acbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278?arch=amd64&repository_url=registry.redhat.io/rhtas/trillian-database-rhel9&tag=1783960127"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
                  "product_id": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/fulcio-rhel9@sha256%3Addeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b?arch=amd64&repository_url=registry.redhat.io/rhtas/fulcio-rhel9&tag=1783968972"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
                  "product_id": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/trillian-logserver-rhel9@sha256%3A716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e?arch=amd64&repository_url=registry.redhat.io/rhtas/trillian-logserver-rhel9&tag=1783968861"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
                  "product_id": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/trillian-logsigner-rhel9@sha256%3Aa480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0?arch=amd64&repository_url=registry.redhat.io/rhtas/trillian-logsigner-rhel9&tag=1783968861"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64",
                  "product_id": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/trillian-redis-rhel9@sha256%3Ae4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e?arch=amd64&repository_url=registry.redhat.io/rhtas/trillian-redis-rhel9&tag=1783411108"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
                  "product_id": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rekor-search-ui-rhel9@sha256%3A8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59?arch=amd64&repository_url=registry.redhat.io/rhtas/rekor-search-ui-rhel9&tag=1783958622"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
                  "product_id": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rekor-server-rhel9@sha256%3A03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b?arch=amd64&repository_url=registry.redhat.io/rhtas/rekor-server-rhel9&tag=1783969365"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
                  "product_id": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/timestamp-authority-rhel9@sha256%3Acc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2?arch=amd64&repository_url=registry.redhat.io/rhtas/timestamp-authority-rhel9&tag=1783968644"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
                  "product_id": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rekor-backfill-redis-rhel9@sha256%3Ac34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9?arch=amd64&repository_url=registry.redhat.io/rhtas/rekor-backfill-redis-rhel9&tag=1783332625"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
                  "product_id": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/certificate-transparency-rhel9@sha256%3A428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d?arch=amd64&repository_url=registry.redhat.io/rhtas/certificate-transparency-rhel9&tag=1783326748"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
                  "product_id": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/trillian-database-rhel9@sha256%3Ab5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521?arch=amd64&repository_url=registry.redhat.io/rhtas/trillian-database-rhel9&tag=1783329793"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
                  "product_id": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/fulcio-rhel9@sha256%3A9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71?arch=amd64&repository_url=registry.redhat.io/rhtas/fulcio-rhel9&tag=1783326847"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
                  "product_id": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/trillian-logserver-rhel9@sha256%3A6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d?arch=amd64&repository_url=registry.redhat.io/rhtas/trillian-logserver-rhel9&tag=1783329793"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
                  "product_id": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/trillian-logsigner-rhel9@sha256%3A613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6?arch=amd64&repository_url=registry.redhat.io/rhtas/trillian-logsigner-rhel9&tag=1783329793"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
                  "product_id": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/trillian-redis-rhel9@sha256%3Afd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa?arch=amd64&repository_url=registry.redhat.io/rhtas/trillian-redis-rhel9&tag=1783329793"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
                  "product_id": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rekor-search-ui-rhel9@sha256%3Ac0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b?arch=amd64&repository_url=registry.redhat.io/rhtas/rekor-search-ui-rhel9&tag=1783327185"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
                  "product_id": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/rekor-server-rhel9@sha256%3A938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67?arch=amd64&repository_url=registry.redhat.io/rhtas/rekor-server-rhel9&tag=1783332625"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
                "product": {
                  "name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
                  "product_id": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/timestamp-authority-rhel9@sha256%3A5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf?arch=amd64&repository_url=registry.redhat.io/rhtas/timestamp-authority-rhel9&tag=1783326690"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
          "product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
          "product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
          "product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
          "product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
          "product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
          "product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
          "product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
          "product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
          "product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
          "product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
          "product_id": "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64"
        },
        "product_reference": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
        "relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 10",
          "product_id": "red_hat_enterprise_linux_10:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 8",
          "product_id": "red_hat_enterprise_linux_8:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:firefox-x11"
        },
        "product_reference": "firefox-x11",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 9",
          "product_id": "red_hat_enterprise_linux_9:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_9"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3",
          "product_id": "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9"
        },
        "product_reference": "rhelai3/bootc-cuda-rhel9",
        "relates_to_product_reference": "red_hat_enterprise_linux_ai_(rhel_ai)_3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3",
          "product_id": "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9"
        },
        "product_reference": "rhelai3/bootc-gaudi-rhel9",
        "relates_to_product_reference": "red_hat_enterprise_linux_ai_(rhel_ai)_3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3",
          "product_id": "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-rocm-rhel9"
        },
        "product_reference": "rhelai3/bootc-rocm-rhel9",
        "relates_to_product_reference": "red_hat_enterprise_linux_ai_(rhel_ai)_3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3",
          "product_id": "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/disk-image-cuda-rhel9"
        },
        "product_reference": "rhelai3/disk-image-cuda-rhel9",
        "relates_to_product_reference": "red_hat_enterprise_linux_ai_(rhel_ai)_3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-44573",
      "cwe": {
        "id": "CWE-551",
        "name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
      },
      "discovery_date": "2026-05-13T18:01:50.343509+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
            "red_hat_enterprise_linux_10:firefox",
            "red_hat_enterprise_linux_10:firefox.src",
            "red_hat_enterprise_linux_10:thunderbird",
            "red_hat_enterprise_linux_10:thunderbird.src",
            "red_hat_enterprise_linux_7:firefox",
            "red_hat_enterprise_linux_7:firefox.src",
            "red_hat_enterprise_linux_8:firefox",
            "red_hat_enterprise_linux_8:firefox.src",
            "red_hat_enterprise_linux_8:thunderbird",
            "red_hat_enterprise_linux_8:thunderbird.src",
            "red_hat_enterprise_linux_9:firefox",
            "red_hat_enterprise_linux_9:firefox-x11",
            "red_hat_enterprise_linux_9:firefox.src",
            "red_hat_enterprise_linux_9:thunderbird",
            "red_hat_enterprise_linux_9:thunderbird.src"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477199"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Next.js. Applications utilizing the Pages Router with internationalization (i18n) configured and middleware or proxy-based authorization are susceptible to unauthorized access. A remote attacker can exploit this by making locale-less /_next/data/<buildId>/<page>.json requests, which bypass the intended authorization checks. This allows the attacker to retrieve sensitive server-side rendered (SSR) JSON data from protected pages, leading to information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: A flaw in Next.js applications allows unauthorized access to sensitive server-side rendered (SSR) JSON data by bypassing middleware authorization checks. This occurs when applications use the Pages Router with internationalization (i18n) and middleware or proxy-based authorization, enabling remote attackers to retrieve protected page data through locale-less requests.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
          "Streams for Apache Kafka 2.9.4",
          "Streams for Apache Kafka 3.2.1"
        ],
        "known_affected": [
          "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9",
          "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9",
          "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-rocm-rhel9",
          "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/disk-image-cuda-rhel9"
        ],
        "known_not_affected": [
          "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
          "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
          "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
          "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
          "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
          "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
          "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
          "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
          "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
          "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
          "red_hat_enterprise_linux_10:firefox",
          "red_hat_enterprise_linux_10:firefox.src",
          "red_hat_enterprise_linux_10:thunderbird",
          "red_hat_enterprise_linux_10:thunderbird.src",
          "red_hat_enterprise_linux_7:firefox",
          "red_hat_enterprise_linux_7:firefox.src",
          "red_hat_enterprise_linux_8:firefox",
          "red_hat_enterprise_linux_8:firefox.src",
          "red_hat_enterprise_linux_8:thunderbird",
          "red_hat_enterprise_linux_8:thunderbird.src",
          "red_hat_enterprise_linux_9:firefox",
          "red_hat_enterprise_linux_9:firefox-x11",
          "red_hat_enterprise_linux_9:firefox.src",
          "red_hat_enterprise_linux_9:thunderbird",
          "red_hat_enterprise_linux_9:thunderbird.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44573"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477199",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477199"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44573",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44573"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44573",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44573"
        },
        {
          "category": "external",
          "summary": "https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5",
          "url": "https://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5"
        }
      ],
      "release_date": "2026-05-13T16:48:16.218000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-16T11:19:42+00:00",
          "details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization's software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
          "product_ids": [
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:40974"
        },
        {
          "category": "vendor_fix",
          "date": "2026-07-09T11:43:10+00:00",
          "details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization's software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
          "product_ids": [
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:37272"
        },
        {
          "category": "vendor_fix",
          "date": "2026-07-02T00:03:15+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Streams for Apache Kafka 2.9.4"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:34608"
        },
        {
          "category": "vendor_fix",
          "date": "2026-08-12T19:35:14+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Streams for Apache Kafka 3.2.1"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:54435"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
            "Streams for Apache Kafka 2.9.4",
            "Streams for Apache Kafka 3.2.1",
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9",
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9",
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-rocm-rhel9",
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/disk-image-cuda-rhel9"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Will not fix",
          "product_ids": [
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9",
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9",
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-rocm-rhel9",
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/disk-image-cuda-rhel9"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
            "Streams for Apache Kafka 2.9.4",
            "Streams for Apache Kafka 3.2.1",
            "red_hat_enterprise_linux_10:firefox",
            "red_hat_enterprise_linux_10:firefox.src",
            "red_hat_enterprise_linux_10:thunderbird",
            "red_hat_enterprise_linux_10:thunderbird.src",
            "red_hat_enterprise_linux_7:firefox",
            "red_hat_enterprise_linux_7:firefox.src",
            "red_hat_enterprise_linux_8:firefox",
            "red_hat_enterprise_linux_8:firefox.src",
            "red_hat_enterprise_linux_8:thunderbird",
            "red_hat_enterprise_linux_8:thunderbird.src",
            "red_hat_enterprise_linux_9:firefox",
            "red_hat_enterprise_linux_9:firefox-x11",
            "red_hat_enterprise_linux_9:firefox.src",
            "red_hat_enterprise_linux_9:thunderbird",
            "red_hat_enterprise_linux_9:thunderbird.src",
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9",
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9",
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-rocm-rhel9",
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/disk-image-cuda-rhel9"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important",
          "product_ids": [
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:b713256acad58c623920da912e3442803a4c6d2f7354d532ff3f772740fe86ab_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fulcio-rhel9@sha256:ddeaf6343db4caaa9e33c6acac0ac2025b807780570bcbfaa412d0bf89b8cb9b_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:28a5270a23b171cdaaca9adf3d6fc24db410a01fc1acdbd87b666e61215f5b3c_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:8ee5d92df659073a13d9aa71e3e5fedac97e0c555a865ebf3697591ea6a38c59_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:03a020d623cc6115237fee9579500f7b047789857df04bdc7c6c14cb37e6de7b_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:cc908b30beddb8c8857888ab0a7b2c84990749b7bfd326ccbd06606ae93427d2_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:cbb7c79ec6053cea1269941dd40d55efb8f6437039d6cbd6a9b4ef55b6393278_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:716df3ddc8bbf4a5c25dae7dbbd1bebba91508df2bb4cc2cc1979c5e5d97923e_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:a480b790358eaf214628d5e9d94b9a05614b76540e35ccca33cff3319c7ae6a0_amd64",
            "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:e4d9e12f8a0af0fa79ef79d0f3b938a7b1d0049baaf305168fb70a8a9922694e_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:428e9da9c20b26a5ba88ec84f1be212ce0474f81c2fd56ac062e3948eb23070d_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/fulcio-rhel9@sha256:9ba4d183d46315edb1a059e55267f30ab66069324cfc3a1a205fdabe45641e71_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:c34be5197926b29fc858ca4295773feb24d7a812691d4c88a70f3be3bbe49ff9_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:c0dfe2abf8d55740eefbaa647de617d1f796390111fae05919bf77897763977b_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/rekor-server-rhel9@sha256:938ca7e6d7fa3862825a86f142be9c6a7b5da1f7dfc6393bff5f77e24613bf67_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:5c3552503bc698f229f835e3686462b75a3af15575edfa1081880fc945f2d8cf_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-database-rhel9@sha256:b5736b9f843573e1820b25da162b537b5f324d437c78a79c54f5258fa2204521_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:6cac09fcce3938f4e08e0dc5960ca5159bd4c36d238e1e49037c977c62dde85d_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:613398e5394371bac97d05c04d97b163c5048a8095ff8ff8bc510a24e46092d6_amd64",
            "Red Hat Trusted Artifact Signer 1.4:registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:fd4c05777a37475158316b694d4319c0a8ea0e39838306ee73523ec37fd3f3fa_amd64",
            "Streams for Apache Kafka 2.9.4",
            "Streams for Apache Kafka 3.2.1",
            "red_hat_enterprise_linux_10:firefox",
            "red_hat_enterprise_linux_10:firefox.src",
            "red_hat_enterprise_linux_10:thunderbird",
            "red_hat_enterprise_linux_10:thunderbird.src",
            "red_hat_enterprise_linux_7:firefox",
            "red_hat_enterprise_linux_7:firefox.src",
            "red_hat_enterprise_linux_8:firefox",
            "red_hat_enterprise_linux_8:firefox.src",
            "red_hat_enterprise_linux_8:thunderbird",
            "red_hat_enterprise_linux_8:thunderbird.src",
            "red_hat_enterprise_linux_9:firefox",
            "red_hat_enterprise_linux_9:firefox-x11",
            "red_hat_enterprise_linux_9:firefox.src",
            "red_hat_enterprise_linux_9:thunderbird",
            "red_hat_enterprise_linux_9:thunderbird.src",
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9",
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9",
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-rocm-rhel9",
            "red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/disk-image-cuda-rhel9"
          ]
        }
      ],
      "title": "next.js: Next.js: Information disclosure due to middleware bypass in Pages Router with i18n"
    }
  ]
}