[
  {
    "aliases": [
      "CVE-2022-24272"
    ],
    "summary": "CVE-2022-24272 mongodb: authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database",
    "affected_packages": [],
    "references": [
      {
        "reference_id": 2077736,
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077736",
        "severities": [
          {
            "system": "rhbs",
            "value": "medium"
          }
        ]
      },
      {
        "reference_id": "",
        "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-24272.json",
        "severities": [
          {
            "system": "cvssv3",
            "value": 6.3
          },
          {
            "system": "cvssv3_vector",
            "value": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N"
          }
        ]
      }
    ],
    "date_published": null
  },
  {
    "aliases": [
      "CVE-2022-21426"
    ],
    "summary": "CVE-2022-21426 OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504)",
    "affected_packages": [
      {
        "package": {
          "type": "rpm",
          "namespace": "redhat",
          "name": "java-11-openjdk",
          "version": null,
          "qualifiers": {
            "arch": "el8_1"
          },
          "subpath": null
        },
        "affected_version_range": "vers:rpm/1:11.0.15.0.9-2",
        "fixed_version": null
      },
      {
        "package": {
          "type": "rpm",
          "namespace": "redhat",
          "name": "java-11-openjdk",
          "version": null,
          "qualifiers": {
            "arch": "el8_2"
          },
          "subpath": null
        },
        "affected_version_range": "vers:rpm/1:11.0.15.0.9-2",
        "fixed_version": null
      },
      {
        "package": {
          "type": "rpm",
          "namespace": "redhat",
          "name": "java-11-openjdk",
          "version": null,
          "qualifiers": {
            "arch": "el7_9"
          },
          "subpath": null
        },
        "affected_version_range": "vers:rpm/1:11.0.15.0.9-2",
        "fixed_version": null
      },
      {
        "package": {
          "type": "rpm",
          "namespace": "redhat",
          "name": "java-11-openjdk",
          "version": null,
          "qualifiers": {
            "arch": "el8_5"
          },
          "subpath": null
        },
        "affected_version_range": "vers:rpm/1:11.0.15.0.9-2",
        "fixed_version": null
      },
      {
        "package": {
          "type": "rpm",
          "namespace": "redhat",
          "name": "java-1.8.0-openjdk",
          "version": null,
          "qualifiers": {
            "arch": "el8_5"
          },
          "subpath": null
        },
        "affected_version_range": "vers:rpm/1:1.8.0.332.b09-1",
        "fixed_version": null
      },
      {
        "package": {
          "type": "rpm",
          "namespace": "redhat",
          "name": "java-11-openjdk",
          "version": null,
          "qualifiers": {
            "arch": "el8_4"
          },
          "subpath": null
        },
        "affected_version_range": "vers:rpm/1:11.0.15.0.9-2",
        "fixed_version": null
      },
      {
        "package": {
          "type": "rpm",
          "namespace": "redhat",
          "name": "java-1.8.0-openjdk",
          "version": null,
          "qualifiers": {
            "arch": "el7_9"
          },
          "subpath": null
        },
        "affected_version_range": "vers:rpm/1:1.8.0.332.b09-1",
        "fixed_version": null
      },
      {
        "package": {
          "type": "rpm",
          "namespace": "redhat",
          "name": "java-1.8.0-openjdk",
          "version": null,
          "qualifiers": {
            "arch": "el8_1"
          },
          "subpath": null
        },
        "affected_version_range": "vers:rpm/1:1.8.0.332.b09-1",
        "fixed_version": null
      },
      {
        "package": {
          "type": "rpm",
          "namespace": "redhat",
          "name": "java-1.8.0-openjdk",
          "version": null,
          "qualifiers": {
            "arch": "el8_2"
          },
          "subpath": null
        },
        "affected_version_range": "vers:rpm/1:1.8.0.332.b09-1",
        "fixed_version": null
      },
      {
        "package": {
          "type": "rpm",
          "namespace": "redhat",
          "name": "java-17-openjdk",
          "version": null,
          "qualifiers": {
            "arch": "el8_5"
          },
          "subpath": null
        },
        "affected_version_range": "vers:rpm/1:17.0.3.0.6-2",
        "fixed_version": null
      },
      {
        "package": {
          "type": "rpm",
          "namespace": "redhat",
          "name": "java-1.8.0-openjdk",
          "version": null,
          "qualifiers": {
            "arch": "el8_4"
          },
          "subpath": null
        },
        "affected_version_range": "vers:rpm/1:1.8.0.332.b09-1",
        "fixed_version": null
      }
    ],
    "references": [
      {
        "reference_id": 2075788,
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2075788",
        "severities": [
          {
            "system": "rhbs",
            "value": "medium"
          }
        ]
      },
      {
        "reference_id": "RHSA-2022:1439",
        "url": "https://access.redhat.com/errata/RHSA-2022:1439",
        "severities": [
          {
            "system": "rhas",
            "value": "Important"
          }
        ]
      },
      {
        "reference_id": "RHSA-2022:1437",
        "url": "https://access.redhat.com/errata/RHSA-2022:1437",
        "severities": [
          {
            "system": "rhas",
            "value": "Important"
          }
        ]
      },
      {
        "reference_id": "",
        "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-21426.json",
        "severities": [
          {
            "system": "cvssv3",
            "value": 5.3
          },
          {
            "system": "cvssv3_vector",
            "value": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
          }
        ]
      }
    ],
    "date_published": null
  }
]