Sync EUVD catalog: Fri May 1 00:50:02 UTC 2026

Signed-off-by: AboutCode Automation <automation@aboutcode.org>

Author: aboutcode-automation

advisories/2026/03/EUVD-2026-10360.json

@@ -2,12 +2,12 @@
   "id": "EUVD-2026-10360",
   "enisaUuid": "54322628-5cef-3f7e-be60-53fb2e2b0d9c",
   "description": "A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)",
-  "datePublished": "Mar 9, 2026, 9:31:39 PM",
-  "dateUpdated": "Mar 9, 2026, 9:31:39 PM",
+  "datePublished": "Mar 9, 2026, 9:00:48 PM",
+  "dateUpdated": "Apr 30, 2026, 12:40:52 PM",
   "baseScore": 8.8,
   "baseScoreVersion": "3.1",
   "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
-  "references": "https://github.com/kubernetes/kubernetes/issues/137560\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-3288\n",
+  "references": "https://github.com/kubernetes/kubernetes/issues/137560\n",
   "aliases": "CVE-2026-3288\nGHSA-c56h-j8gw-3v54\n",
   "assigner": "kubernetes",
   "epss": 0.05,

advisories/2026/03/EUVD-2026-12031.json

@@ -3,11 +3,11 @@
   "enisaUuid": "64d14084-b162-3fd0-947c-ec89acd03204",
   "description": "A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.",
   "datePublished": "Mar 13, 2026, 11:45:20 AM",
-  "dateUpdated": "Apr 25, 2026, 4:20:44 PM",
+  "dateUpdated": "Apr 30, 2026, 12:47:00 PM",
   "baseScore": 7.5,
   "baseScoreVersion": "3.1",
   "baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
-  "references": "https://access.redhat.com/errata/RHSA-2026:10065\nhttps://access.redhat.com/errata/RHSA-2026:5063\nhttps://access.redhat.com/errata/RHSA-2026:5080\nhttps://access.redhat.com/errata/RHSA-2026:6647\nhttps://access.redhat.com/errata/RHSA-2026:7093\nhttps://access.redhat.com/errata/RHSA-2026:7105\nhttps://access.redhat.com/errata/RHSA-2026:7106\nhttps://access.redhat.com/errata/RHSA-2026:7239\nhttps://access.redhat.com/errata/RHSA-2026:7329\nhttps://access.redhat.com/errata/RHSA-2026:7335\nhttps://access.redhat.com/errata/RHSA-2026:8423\nhttps://access.redhat.com/errata/RHSA-2026:8746\nhttps://access.redhat.com/errata/RHSA-2026:8747\nhttps://access.redhat.com/errata/RHSA-2026:8748\nhttps://access.redhat.com/errata/RHSA-2026:8865\nhttps://access.redhat.com/errata/RHSA-2026:8944\nhttps://access.redhat.com/errata/RHSA-2026:9832\nhttps://access.redhat.com/security/cve/CVE-2026-4111\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2446453\nhttps://github.com/libarchive/libarchive/pull/2877\n",
+  "references": "https://access.redhat.com/errata/RHSA-2026:10065\nhttps://access.redhat.com/errata/RHSA-2026:10081\nhttps://access.redhat.com/errata/RHSA-2026:10097\nhttps://access.redhat.com/errata/RHSA-2026:5063\nhttps://access.redhat.com/errata/RHSA-2026:5080\nhttps://access.redhat.com/errata/RHSA-2026:6647\nhttps://access.redhat.com/errata/RHSA-2026:7093\nhttps://access.redhat.com/errata/RHSA-2026:7105\nhttps://access.redhat.com/errata/RHSA-2026:7106\nhttps://access.redhat.com/errata/RHSA-2026:7239\nhttps://access.redhat.com/errata/RHSA-2026:7329\nhttps://access.redhat.com/errata/RHSA-2026:7335\nhttps://access.redhat.com/errata/RHSA-2026:8423\nhttps://access.redhat.com/errata/RHSA-2026:8746\nhttps://access.redhat.com/errata/RHSA-2026:8747\nhttps://access.redhat.com/errata/RHSA-2026:8748\nhttps://access.redhat.com/errata/RHSA-2026:8865\nhttps://access.redhat.com/errata/RHSA-2026:8944\nhttps://access.redhat.com/errata/RHSA-2026:9832\nhttps://access.redhat.com/security/cve/CVE-2026-4111\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2446453\nhttps://github.com/libarchive/libarchive/pull/2877\n",
   "aliases": "CVE-2026-4111\n",
   "assigner": "redhat",
   "epss": 0.04,
@@ -47,6 +47,13 @@
       },
       "product_version": "patch: 413.92.202604080111-0"
     },
+    {
+      "id": "39f565f5-6ed3-3b32-81eb-c67a5c5f2892",
+      "product": {
+        "name": "Red Hat AI Inference Server 3.3"
+      },
+      "product_version": "patch: 1775680192"
+    },
     {
       "id": "3f539bf8-b6f9-3cea-8065-aa9db4347afe",
       "product": {
@@ -75,20 +82,69 @@
       },
       "product_version": "patch: 0:3.5.3-6.el9_6.1"
     },
+    {
+      "id": "5479ecef-4cb2-3d47-9eff-0ca98d9b64b3",
+      "product": {
+        "name": "Red Hat Insights proxy 1.5"
+      },
+      "product_version": "patch: 1776868961"
+    },
     {
       "id": "57a7dfed-45e5-362b-be45-8c9c21de6d92",
       "product": {
         "name": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions"
       },
       "product_version": "patch: 0:3.5.3-5.el9_2.1"
     },
+    {
+      "id": "5938d67f-8cc6-30da-b459-00fb13f6c4c2",
+      "product": {
+        "name": "Red Hat Discovery 2"
+      },
+      "product_version": "patch: 1775675922"
+    },
+    {
+      "id": "5a000d3e-b32d-350e-a756-8c622c5c741b",
+      "product": {
+        "name": "Red Hat AI Inference Server 3.2"
+      },
+      "product_version": "patch: 1775740563"
+    },
+    {
+      "id": "64e7e136-34a9-30ae-8734-02660d1cb7d6",
+      "product": {
+        "name": "Red Hat Update Infrastructure 5"
+      },
+      "product_version": "patch: 1776868774"
+    },
     {
       "id": "7888ea9f-5db8-3f93-82c7-b0168cce902c",
       "product": {
         "name": "Red Hat Update Infrastructure 5"
       },
       "product_version": "patch: sha256:8e13332d210961a93746eb0bd3761fa220dc710aada98b121320184aef2e5709"
     },
+    {
+      "id": "843f5cd7-9315-3f80-ad16-856bf7fba779",
+      "product": {
+        "name": "Red Hat AI Inference Server 3.3"
+      },
+      "product_version": "patch: 1775680262"
+    },
+    {
+      "id": "8d45f89d-c40c-307b-9eee-90d2ca1a4771",
+      "product": {
+        "name": "Red Hat Discovery 2"
+      },
+      "product_version": "patch: 1775668717"
+    },
+    {
+      "id": "915342ec-2921-3351-80ef-a1e7c972ec04",
+      "product": {
+        "name": "Red Hat OpenShift Container Platform 4.16"
+      },
+      "product_version": "patch: 416.94.202604211449-0"
+    },
     {
       "id": "9606ba53-506f-3ebb-af4a-948b59802100",
       "product": {
@@ -103,6 +159,13 @@
       },
       "product_version": "patch: 418.94.202604140044-0"
     },
+    {
+      "id": "a477f5ca-1c2e-32bf-8395-fd093caf649f",
+      "product": {
+        "name": "Red Hat Update Infrastructure 5"
+      },
+      "product_version": "patch: 1776868744"
+    },
     {
       "id": "a54fad51-8b16-3956-9c4b-0abc4b44a6a4",
       "product": {
@@ -117,6 +180,13 @@
       },
       "product_version": "patch: sha256:7eae5b16539484129c6ce169b41a3e1da7d7dd1296d2677acf7e9c3d1bce00ed"
     },
+    {
+      "id": "b0c48a52-19fb-3590-9060-7f0c436db663",
+      "product": {
+        "name": "Red Hat Update Infrastructure 5"
+      },
+      "product_version": "patch: 1776868842"
+    },
     {
       "id": "b68bc367-fd7f-39e7-a241-6a54815bc2cc",
       "product": {
@@ -131,13 +201,34 @@
       },
       "product_version": "patch: sha256:16b5fab54718cedc94d43f2bd55bd14a469cfbfbbbd0fe634ed81783196d2f42"
     },
+    {
+      "id": "c0bf6284-5bcd-34ec-9bda-2d402be71356",
+      "product": {
+        "name": "Red Hat AI Inference Server 3.3"
+      },
+      "product_version": "patch: 1775749857"
+    },
+    {
+      "id": "d3f9ef9d-0e2d-3c65-a59f-1e42ff467f9d",
+      "product": {
+        "name": "Red Hat Update Infrastructure 5"
+      },
+      "product_version": "patch: 1776868772"
+    },
     {
       "id": "e2ccd141-b1c3-343d-9bf0-124d46adffbf",
       "product": {
         "name": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions"
       },
       "product_version": "patch: 0:3.5.3-2.el9_0.3"
     },
+    {
+      "id": "ea526995-1e59-3571-8d52-4e6792dca338",
+      "product": {
+        "name": "Red Hat OpenShift Container Platform 4.19"
+      },
+      "product_version": "patch: 4.19.9.6.202604211219-0"
+    },
     {
       "id": "f2bbe426-8e7d-39e0-a95d-0a57a340cd82",
       "product": {