CVE-2025-11065

[
  {
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.4.0",
        "versionType": "semver"
      }
    ],
    "packageName": "github.com/go-viper/mapstructure/v2",
    "collectionURL": "https://github.com/go-viper/mapstructure/",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Pipelines",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-pipelines-client",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift_pipelines:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhacm2/acm-grafana-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:acm:2"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhacm2/submariner-rhel9-operator",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:acm:2"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-central-db-rhel8",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-main-rhel8",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-rhel8-operator",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-scanner-v4-db-rhel8",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Advanced Cluster Security 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:advanced_cluster_security:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Certification for Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "redhat-certification-preflight",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:certifications:1::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "redhat-certification-preflight",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:certifications:9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "gvisor-tap-vsock",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "opentelemetry-collector",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "toolbox",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "gvisor-tap-vsock",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "opentelemetry-collector",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "toolbox",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhoai/odh-model-registry-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhoai/odh-rhel9-operator",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "microshift",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-helm-operator",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift4/ose-helm-rhel9-operator",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "podman",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Dev Spaces",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "devspaces/traefik-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift_devspaces:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Dev Spaces",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "devspaces/udi-base-rhel9",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:openshift_devspaces:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Dev Spaces",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "devspaces/udi-rhel9",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/a:redhat:openshift_devspaces:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift distributed tracing 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhosdt/opentelemetry-collector-rhel8",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift_distributed_tracing:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift GitOps",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-gitops-1/argocd-rhel8",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift_gitops:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift GitOps",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-gitops-1/argocd-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift_gitops:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Trusted Application Pipeline",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhtap-task-runner/rhtap-task-runner-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:trusted_application_pipeline:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Trusted Artifact Signer",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhtas/cosign-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:trusted_artifact_signer:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Trusted Artifact Signer",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhtas/fulcio-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:trusted_artifact_signer:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Trusted Artifact Signer",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhtas/gitsign-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:trusted_artifact_signer:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Trusted Artifact Signer",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhtas/rekor-backfill-redis-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:trusted_artifact_signer:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Trusted Artifact Signer",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhtas/rekor-cli-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:trusted_artifact_signer:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Trusted Artifact Signer",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhtas/rekor-server-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:trusted_artifact_signer:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Trusted Artifact Signer",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhtas/timestamp-authority-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:trusted_artifact_signer:1"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Zero Trust Workload Identity Manager - Tech Preview",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Zero Trust Workload Identity Manager - Tech Preview",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Zero Trust Workload Identity Manager - Tech Preview",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "zero-trust-workload-identity-manager/spiffe-spire-server-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Zero Trust Workload Identity Manager - Tech Preview",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
    ]
  }
]