{"affected":[{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libmodulemd","product":"Red Hat Enterprise Linux 10","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libmodulemd","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libmodulemd","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libmodulemd","product":"Red Hat Hardened Images","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-8","product":"Red Hat OpenShift Container Platform 4","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 5","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cveId":"CVE-2026-92822","cwes":["CWE-674"],"description":"A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through recursive YAML mapping and sequence helpers without a recursion-depth or node-count limit. An attacker who can supply crafted modulemd YAML with deeply nested xmd content can cause stack exhaustion or excessive resource consumption, resulting in a denial of service.","epss":{"date":"2026-11-05","percentile":0.11732,"score":0.00213},"exploits":[{"kind":"exploit","source":"ADP: CISA-ADP","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2479002"}],"kev":null,"metrics":[{"score":6.2,"severity":"medium","source":"CNA: redhat","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1793929820024,"publishedAt":1792552717973,"references":[{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-92822"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2479002"},{"source":"CNA: redhat","tags":[],"url":"https://github.com/advisories/GHSA-85r9-7wj5-x6x5"},{"source":"CNA: redhat","tags":[],"url":"https://github.com/fedora-modularity/libmodulemd/pull/645"},{"source":"ADP: CISA-ADP","tags":["exploit"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2479002"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"Avoid parsing untrusted modulemd documents that may contain attacker-controlled xmd data. If such input must be accepted, reject unusually deep or large xmd structures before handing them to libmodulemd, and isolate parsing in a process with strict stack, CPU, and memory limits."}],"revision":"8846006e5e94ddfac5b73baf5d19b471f5083eb9ef6a472b70aa24f7f197574a","sources":[{"modifiedAt":1793929820024,"name":"CNA: redhat","retrievedAt":1793931106741,"url":"https://www.cve.org/CVERecord?id=CVE-2026-92822"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793931123589,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-92822"}],"ssvc":{"assessedAt":1792615362905,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml","updatedAt":1793931123589}