Raw JSON
{
"$schema": "https://docs.oasis-open.org/csaf/csaf/v2.1/schema/csaf.json",
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.1",
"distribution": {
"tlp": {
"label": "RED"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Generated from an analysis of SBOM satellite_6.18.json (spdx-json, sha256 f8c500dd5e74dc9539130173be064dc07d5a649ee14d93b79ca67ad0977cd8fe)."
},
{
"category": "general",
"text": "This advisory is based on an INCOMPLETE analysis. The following analyzers did not produce results, so components they would have covered may carry vulnerabilities not listed here: grype (fail), shieldbom (running).",
"title": "Analysis coverage"
}
],
"publisher": {
"category": "vendor",
"contact_details": "security@ndaal.eu",
"name": "ndaal Gesellschaft fuer Sicherheit in der Informationstechnik mbH & Co KG",
"namespace": "https://ndaal.eu/csaf"
},
"references": [
{
"category": "self",
"summary": "This advisory",
"url": "https://ndaal.eu/csaf/ndaal-sba-draft-f8c500dd5e74dc95"
}
],
"title": "Vulnerabilities found in SBOM satellite_6.18.json",
"tracking": {
"current_release_date": "2026-10-12T02:39:29Z",
"generator": {
"engine": {
"name": "ndaal SBOM Auditor",
"version": "1.6.34"
}
},
"id": "ndaal-sba-draft-f8c500dd5e74dc95",
"initial_release_date": "2026-10-12T02:39:29Z",
"revision_history": [
{
"date": "2026-10-12T02:39:29Z",
"number": "0.1.0",
"summary": "Initial draft generated from an SBOM analysis."
}
],
"status": "draft",
"version": "0.1.0"
}
},
"product_tree": {
"full_product_names": [
{
"name": "@babel/core@7.24.4",
"product_id": "CSAFPID-0277"
},
{
"name": "@babel/core@7.28.0",
"product_id": "CSAFPID-0278"
},
{
"name": "@babel/helpers@7.24.4",
"product_id": "CSAFPID-0184"
},
{
"name": "@babel/plugin-transform-modules-systemjs@7.27.1",
"product_id": "CSAFPID-0102"
},
{
"name": "@babel/runtime@7.9.2",
"product_id": "CSAFPID-0185"
},
{
"name": "@eslint/plugin-kit@0.2.8",
"product_id": "CSAFPID-0286"
},
{
"name": "@eslint/plugin-kit@0.3.3",
"product_id": "CSAFPID-0287"
},
{
"name": "@faker-js/faker@5.5.3",
"product_id": "CSAFPID-0133"
},
{
"name": "@faker-js/faker@6.3.1",
"product_id": "CSAFPID-0134"
},
{
"name": "@faker-js/faker@9.9.0",
"product_id": "CSAFPID-0135"
},
{
"name": "@hono/node-server@1.19.9",
"product_id": "CSAFPID-0085"
},
{
"name": "@humanfs/node@0.16.6",
"product_id": "CSAFPID-0260"
},
{
"name": "@humanfs/node@0.16.7",
"product_id": "CSAFPID-0261"
},
{
"name": "@modelcontextprotocol/sdk@1.25.3",
"product_id": "CSAFPID-0058"
},
{
"name": "@remix-run/router@1.23.0",
"product_id": "CSAFPID-0073"
},
{
"name": "@remix-run/router@1.23.2",
"product_id": "CSAFPID-0224"
},
{
"name": "@sigstore/core@2.0.0",
"product_id": "CSAFPID-0236"
},
{
"name": "@tootallnate/once@1.1.2",
"product_id": "CSAFPID-0273"
},
{
"name": "@tootallnate/once@2.0.0",
"product_id": "CSAFPID-0274"
},
{
"name": "activesupport@7.0.8.7",
"product_id": "CSAFPID-0088"
},
{
"name": "aiohttp@3.13.3",
"product_id": "CSAFPID-0060"
},
{
"name": "aiohttp@3.14.3",
"product_id": "CSAFPID-0061"
},
{
"name": "ajv@6.12.6",
"product_id": "CSAFPID-0195"
},
{
"name": "ajv@8.17.1",
"product_id": "CSAFPID-0196"
},
{
"name": "ammonia@4.1.1",
"product_id": "CSAFPID-0285"
},
{
"name": "ansi_term@0.11.0",
"product_id": "CSAFPID-0299"
},
{
"name": "anyhow@1.0.102",
"product_id": "CSAFPID-0312"
},
{
"name": "anyhow@1.0.89",
"product_id": "CSAFPID-0313"
},
{
"name": "anyhow@1.0.98",
"product_id": "CSAFPID-0314"
},
{
"name": "anyhow@1.0.99",
"product_id": "CSAFPID-0315"
},
{
"name": "anyio@4.10.0",
"product_id": "CSAFPID-0015"
},
{
"name": "anyio@4.11.0",
"product_id": "CSAFPID-0016"
},
{
"name": "anyio@4.13.0",
"product_id": "CSAFPID-0017"
},
{
"name": "anyio@4.14.0",
"product_id": "CSAFPID-0018"
},
{
"name": "async-std@1.12.0",
"product_id": "CSAFPID-0305"
},
{
"name": "atty@0.2.14",
"product_id": "CSAFPID-0283"
},
{
"name": "aws-lc-fips-sys@0.13.8",
"product_id": "CSAFPID-0161"
},
{
"name": "aws-lc-sys@0.27.1",
"product_id": "CSAFPID-0162"
},
{
"name": "aws-sdk@2.1595.0",
"product_id": "CSAFPID-0284"
},
{
"name": "axios@1.19.0",
"product_id": "CSAFPID-0048"
},
{
"name": "bincode@1.3.3",
"product_id": "CSAFPID-0308"
},
{
"name": "bincode@2.0.1",
"product_id": "CSAFPID-0309"
},
{
"name": "black@23.12.1",
"product_id": "CSAFPID-0176"
},
{
"name": "body-parser@1.20.3",
"product_id": "CSAFPID-0266"
},
{
"name": "body-parser@1.20.5",
"product_id": "CSAFPID-0267"
},
{
"name": "body-parser@2.2.2",
"product_id": "CSAFPID-0268"
},
{
"name": "brace-expansion@1.1.16",
"product_id": "CSAFPID-0049"
},
{
"name": "brace-expansion@2.1.2",
"product_id": "CSAFPID-0050"
},
{
"name": "brace-expansion@2.1.4",
"product_id": "CSAFPID-0051"
},
{
"name": "brace-expansion@5.0.7",
"product_id": "CSAFPID-0052"
},
{
"name": "brace-expansion@5.0.8",
"product_id": "CSAFPID-0053"
},
{
"name": "brace-expansion@5.0.9",
"product_id": "CSAFPID-0054"
},
{
"name": "braces@3.0.3",
"product_id": "CSAFPID-0146"
},
{
"name": "browserslist@4.23.0",
"product_id": "CSAFPID-0132"
},
{
"name": "bytes@1.10.1",
"product_id": "CSAFPID-0214"
},
{
"name": "bytes@1.9.0",
"product_id": "CSAFPID-0215"
},
{
"name": "certifi@2025.10.5",
"product_id": "CSAFPID-0023"
},
{
"name": "certifi@2025.11.12",
"product_id": "CSAFPID-0024"
},
{
"name": "certifi@2025.6.15",
"product_id": "CSAFPID-0025"
},
{
"name": "certifi@2025.7.14",
"product_id": "CSAFPID-0026"
},
{
"name": "certifi@2025.8.3",
"product_id": "CSAFPID-0027"
},
{
"name": "certifi@2026.6.17",
"product_id": "CSAFPID-0028"
},
{
"name": "ch.qos.logback:logback-core@1.5.18",
"product_id": "CSAFPID-0183"
},
{
"name": "colord@2.9.3",
"product_id": "CSAFPID-0252"
},
{
"name": "com.fasterxml.jackson.core:jackson-core@2.19.2.redhat-00003",
"product_id": "CSAFPID-0128"
},
{
"name": "com.fasterxml.jackson.core:jackson-databind@2.19.2.redhat-00003",
"product_id": "CSAFPID-0116"
},
{
"name": "com.google.guava:guava@31.0.1-jre",
"product_id": "CSAFPID-0172"
},
{
"name": "com.mchange:mchange-commons-java@0.4.0",
"product_id": "CSAFPID-0117"
},
{
"name": "com.sun.mail:jakarta.mail@1.6.5.redhat-00001",
"product_id": "CSAFPID-0199"
},
{
"name": "compression@1.8.0",
"product_id": "CSAFPID-0142"
},
{
"name": "compression@1.8.1",
"product_id": "CSAFPID-0143"
},
{
"name": "crossbeam-epoch@0.9.15",
"product_id": "CSAFPID-0316"
},
{
"name": "crossbeam-epoch@0.9.18",
"product_id": "CSAFPID-0317"
},
{
"name": "cryptography@46.0.3",
"product_id": "CSAFPID-0076"
},
{
"name": "cryptography@46.0.6",
"product_id": "CSAFPID-0129"
},
{
"name": "cryptography@48.0.0",
"product_id": "CSAFPID-0130"
},
{
"name": "cryptography@49.0.0",
"product_id": "CSAFPID-0131"
},
{
"name": "d3-color@1.4.1",
"product_id": "CSAFPID-0159"
},
{
"name": "diff@7.0.0",
"product_id": "CSAFPID-0269"
},
{
"name": "difference@2.0.0",
"product_id": "CSAFPID-0297"
},
{
"name": "django@4.2.30",
"product_id": "CSAFPID-0070"
},
{
"name": "django@6.0.6",
"product_id": "CSAFPID-0071"
},
{
"name": "djangorestframework@3.17.1",
"product_id": "CSAFPID-0247"
},
{
"name": "dompurify@1.0.11",
"product_id": "CSAFPID-0003"
},
{
"name": "ejs@2.7.4",
"product_id": "CSAFPID-0001"
},
{
"name": "encoding@0.2.33",
"product_id": "CSAFPID-0300"
},
{
"name": "event-listener@5.2.0",
"product_id": "CSAFPID-0319"
},
{
"name": "extract-zip@2.0.1",
"product_id": "CSAFPID-0072"
},
{
"name": "fast-copy@3.0.1",
"product_id": "CSAFPID-0259"
},
{
"name": "fast-uri@3.1.6",
"product_id": "CSAFPID-0140"
},
{
"name": "fast-uri@4.1.3",
"product_id": "CSAFPID-0141"
},
{
"name": "fast-xml-parser@5.9.3",
"product_id": "CSAFPID-0136"
},
{
"name": "filelock@3.18.0",
"product_id": "CSAFPID-0190"
},
{
"name": "filelock@3.19.1",
"product_id": "CSAFPID-0191"
},
{
"name": "filelock@3.20.0",
"product_id": "CSAFPID-0192"
},
{
"name": "filelock@3.20.2",
"product_id": "CSAFPID-0213"
},
{
"name": "flask@3.1.1",
"product_id": "CSAFPID-0270"
},
{
"name": "flask@3.1.2",
"product_id": "CSAFPID-0271"
},
{
"name": "flatted@3.3.1",
"product_id": "CSAFPID-0086"
},
{
"name": "flatted@3.3.3",
"product_id": "CSAFPID-0087"
},
{
"name": "follow-redirects@1.16.0",
"product_id": "CSAFPID-0062"
},
{
"name": "foreman-mcp-server@0.1.0",
"product_id": "CSAFPID-0253"
},
{
"name": "form-data@4.0.4",
"product_id": "CSAFPID-0069"
},
{
"name": "fsspec@2025.5.1",
"product_id": "CSAFPID-0059"
},
{
"name": "github.com/aws/aws-sdk-go@v1.55.6",
"product_id": "CSAFPID-0294"
},
{
"name": "github.com/aws/aws-sdk-go@v1.55.7",
"product_id": "CSAFPID-0295"
},
{
"name": "github.com/go-chi/chi@v4.1.2+incompatible",
"product_id": "CSAFPID-0296"
},
{
"name": "github.com/klauspost/compress@v1.17.11",
"product_id": "CSAFPID-0127"
},
{
"name": "github.com/redhatinsights/yggdrasil@v0.0.0-20220216151445-6e0de0ad703b",
"product_id": "CSAFPID-0042"
},
{
"name": "glob@10.3.3",
"product_id": "CSAFPID-0046"
},
{
"name": "golang.org/x/crypto@v0.36.0",
"product_id": "CSAFPID-0044"
},
{
"name": "golang.org/x/crypto@v0.53.0",
"product_id": "CSAFPID-0121"
},
{
"name": "golang.org/x/mod@v0.37.0",
"product_id": "CSAFPID-0122"
},
{
"name": "golang.org/x/net@v0.17.0",
"product_id": "CSAFPID-0035"
},
{
"name": "golang.org/x/net@v0.38.0",
"product_id": "CSAFPID-0075"
},
{
"name": "golang.org/x/net@v0.56.0",
"product_id": "CSAFPID-0139"
},
{
"name": "golang.org/x/sys@v0.13.0",
"product_id": "CSAFPID-0288"
},
{
"name": "golang.org/x/sys@v0.31.0",
"product_id": "CSAFPID-0289"
},
{
"name": "golang.org/x/text@v0.13.0",
"product_id": "CSAFPID-0118"
},
{
"name": "golang.org/x/text@v0.23.0",
"product_id": "CSAFPID-0119"
},
{
"name": "golang.org/x/text@v0.39.0",
"product_id": "CSAFPID-0120"
},
{
"name": "google.golang.org/grpc@v1.58.3",
"product_id": "CSAFPID-0012"
},
{
"name": "google.golang.org/protobuf@v1.31.0",
"product_id": "CSAFPID-0178"
},
{
"name": "h2@0.4.10",
"product_id": "CSAFPID-0321"
},
{
"name": "h2@0.4.12",
"product_id": "CSAFPID-0322"
},
{
"name": "h2@4.3.0",
"product_id": "CSAFPID-0246"
},
{
"name": "handlebars@4.7.9",
"product_id": "CSAFPID-0009"
},
{
"name": "hono@4.11.7",
"product_id": "CSAFPID-0084"
},
{
"name": "hpack@4.1.0",
"product_id": "CSAFPID-0245"
},
{
"name": "http-cache-semantics@4.2.0",
"product_id": "CSAFPID-0147"
},
{
"name": "http-proxy-middleware@2.0.9",
"product_id": "CSAFPID-0240"
},
{
"name": "idna@2.10",
"product_id": "CSAFPID-0180"
},
{
"name": "idna@3.10",
"product_id": "CSAFPID-0231"
},
{
"name": "idna@3.11",
"product_id": "CSAFPID-0232"
},
{
"name": "instant@0.1.12",
"product_id": "CSAFPID-0303"
},
{
"name": "io.micrometer:micrometer-core@1.15.1",
"product_id": "CSAFPID-0092"
},
{
"name": "io.netty:netty-codec-http@4.1.121.Final",
"product_id": "CSAFPID-0091"
},
{
"name": "io.netty:netty-codec@4.1.121.Final",
"product_id": "CSAFPID-0098"
},
{
"name": "io.netty:netty-handler-proxy@4.1.121.Final",
"product_id": "CSAFPID-0275"
},
{
"name": "io.netty:netty-handler@4.1.121.Final",
"product_id": "CSAFPID-0019"
},
{
"name": "io.netty:netty-transport-native-epoll@4.1.121.Final",
"product_id": "CSAFPID-0233"
},
{
"name": "io.netty:netty-transport-native-kqueue@4.1.121.Final",
"product_id": "CSAFPID-0234"
},
{
"name": "ip-address@10.4.0",
"product_id": "CSAFPID-0202"
},
{
"name": "jaraco-context@5.3.0",
"product_id": "CSAFPID-0291"
},
{
"name": "joi@17.13.3",
"product_id": "CSAFPID-0144"
},
{
"name": "joi@17.13.4",
"product_id": "CSAFPID-0145"
},
{
"name": "js-yaml@3.14.1",
"product_id": "CSAFPID-0123"
},
{
"name": "js-yaml@3.14.2",
"product_id": "CSAFPID-0124"
},
{
"name": "js-yaml@4.1.0",
"product_id": "CSAFPID-0125"
},
{
"name": "json-pointer@0.6.1",
"product_id": "CSAFPID-0002"
},
{
"name": "jsonpointer@4.0.1",
"product_id": "CSAFPID-0170"
},
{
"name": "jws@4.0.0",
"product_id": "CSAFPID-0047"
},
{
"name": "katello@4.18.0.13",
"product_id": "CSAFPID-0210"
},
{
"name": "launch-editor@2.10.0",
"product_id": "CSAFPID-0066"
},
{
"name": "launch-editor@2.13.2",
"product_id": "CSAFPID-0067"
},
{
"name": "launch-editor@2.14.1",
"product_id": "CSAFPID-0068"
},
{
"name": "linkify-it@5.0.0",
"product_id": "CSAFPID-0108"
},
{
"name": "lodash-es@4.17.21",
"product_id": "CSAFPID-0105"
},
{
"name": "lodash@4.17.21",
"product_id": "CSAFPID-0103"
},
{
"name": "lodash@4.17.23",
"product_id": "CSAFPID-0104"
},
{
"name": "lru@0.16.3",
"product_id": "CSAFPID-0320"
},
{
"name": "mako@1.3.10",
"product_id": "CSAFPID-0093"
},
{
"name": "markdown-it@14.1.0",
"product_id": "CSAFPID-0063"
},
{
"name": "marked@0.6.3",
"product_id": "CSAFPID-0030"
},
{
"name": "marshmallow@4.0.0",
"product_id": "CSAFPID-0194"
},
{
"name": "mcp@1.28.0",
"product_id": "CSAFPID-0126"
},
{
"name": "memmap2@0.9.10",
"product_id": "CSAFPID-0311"
},
{
"name": "memray@1.19.1",
"product_id": "CSAFPID-0272"
},
{
"name": "min-document@2.19.0",
"product_id": "CSAFPID-0262"
},
{
"name": "minimatch@3.1.2",
"product_id": "CSAFPID-0078"
},
{
"name": "minimatch@5.1.6",
"product_id": "CSAFPID-0079"
},
{
"name": "minimatch@9.0.4",
"product_id": "CSAFPID-0080"
},
{
"name": "minimatch@9.0.5",
"product_id": "CSAFPID-0081"
},
{
"name": "moment@2.30.1",
"product_id": "CSAFPID-0212"
},
{
"name": "msgpack@1.1.1",
"product_id": "CSAFPID-0163"
},
{
"name": "msgpack@1.1.2",
"product_id": "CSAFPID-0164"
},
{
"name": "multidict@6.7.0",
"product_id": "CSAFPID-0207"
},
{
"name": "multipart@0.18.0",
"product_id": "CSAFPID-0301"
},
{
"name": "nconf@0.10.0",
"product_id": "CSAFPID-0031"
},
{
"name": "node-fetch@2.6.1",
"product_id": "CSAFPID-0029"
},
{
"name": "node-forge@1.3.1",
"product_id": "CSAFPID-0041"
},
{
"name": "number_prefix@0.4.0",
"product_id": "CSAFPID-0306"
},
{
"name": "on-headers@1.0.2",
"product_id": "CSAFPID-0265"
},
{
"name": "openssl@0.10.72",
"product_id": "CSAFPID-0094"
},
{
"name": "openssl@0.10.73",
"product_id": "CSAFPID-0095"
},
{
"name": "openssl@0.10.74",
"product_id": "CSAFPID-0096"
},
{
"name": "openssl@0.10.79",
"product_id": "CSAFPID-0235"
},
{
"name": "org.apache.activemq:artemis-server@2.42.0",
"product_id": "CSAFPID-0011"
},
{
"name": "org.apache.commons:commons-configuration2@2.11.0",
"product_id": "CSAFPID-0230"
},
{
"name": "org.apache.commons:commons-lang3@3.14.0",
"product_id": "CSAFPID-0187"
},
{
"name": "org.apache.james:apache-mime4j-core@0.8.9.redhat-00001",
"product_id": "CSAFPID-0177"
},
{
"name": "org.bouncycastle:bcpkix-jdk18on@1.81.0.redhat-00001",
"product_id": "CSAFPID-0242"
},
{
"name": "org.bouncycastle:bcprov-jdk18on@1.81.0.redhat-00001",
"product_id": "CSAFPID-0004"
},
{
"name": "org.keycloak:keycloak-adapter-core@25.0.3",
"product_id": "CSAFPID-0209"
},
{
"name": "org.keycloak:keycloak-core@25.0.3",
"product_id": "CSAFPID-0036"
},
{
"name": "org.keycloak:keycloak-server-spi-private@25.0.3",
"product_id": "CSAFPID-0077"
},
{
"name": "org.mariadb.jdbc:mariadb-java-client@3.5.4.redhat-00001",
"product_id": "CSAFPID-0241"
},
{
"name": "org.postgresql:postgresql@42.7.7.redhat-00001",
"product_id": "CSAFPID-0097"
},
{
"name": "owning_ref@0.4.1",
"product_id": "CSAFPID-0258"
},
{
"name": "pacote@19.0.2",
"product_id": "CSAFPID-0149"
},
{
"name": "pacote@20.0.1",
"product_id": "CSAFPID-0150"
},
{
"name": "paste@1.0.15",
"product_id": "CSAFPID-0304"
},
{
"name": "path-to-regexp@0.1.12",
"product_id": "CSAFPID-0106"
},
{
"name": "path-to-regexp@8.1.0",
"product_id": "CSAFPID-0111"
},
{
"name": "path-to-regexp@8.3.0",
"product_id": "CSAFPID-0112"
},
{
"name": "picomatch@2.3.1",
"product_id": "CSAFPID-0089"
},
{
"name": "picomatch@4.0.3",
"product_id": "CSAFPID-0090"
},
{
"name": "pillow@12.1.1",
"product_id": "CSAFPID-0010"
},
{
"name": "pip@22.3.1",
"product_id": "CSAFPID-0174"
},
{
"name": "pip@23.2.1",
"product_id": "CSAFPID-0175"
},
{
"name": "pip@24.2",
"product_id": "CSAFPID-0200"
},
{
"name": "pip@25.2",
"product_id": "CSAFPID-0201"
},
{
"name": "playwright@1.54.1",
"product_id": "CSAFPID-0045"
},
{
"name": "postcss-selector-parser@7.1.0",
"product_id": "CSAFPID-0204"
},
{
"name": "postcss-selector-parser@7.1.1",
"product_id": "CSAFPID-0205"
},
{
"name": "postcss-selector-parser@7.1.4",
"product_id": "CSAFPID-0206"
},
{
"name": "proc-macro-error@1.0.4",
"product_id": "CSAFPID-0302"
},
{
"name": "proxy-addr@2.0.7",
"product_id": "CSAFPID-0020"
},
{
"name": "pug-code-gen@2.0.3",
"product_id": "CSAFPID-0179"
},
{
"name": "pug@2.0.4",
"product_id": "CSAFPID-0169"
},
{
"name": "pygments@2.19.2",
"product_id": "CSAFPID-0276"
},
{
"name": "pyjwt@2.12.1",
"product_id": "CSAFPID-0005"
},
{
"name": "pyjwt@2.13.0",
"product_id": "CSAFPID-0006"
},
{
"name": "pyo3@0.23.4",
"product_id": "CSAFPID-0152"
},
{
"name": "pyo3@0.24.0",
"product_id": "CSAFPID-0153"
},
{
"name": "pyo3@0.24.1",
"product_id": "CSAFPID-0154"
},
{
"name": "pyo3@0.25.1",
"product_id": "CSAFPID-0155"
},
{
"name": "pyo3@0.26.0",
"product_id": "CSAFPID-0156"
},
{
"name": "pyo3@0.27.2",
"product_id": "CSAFPID-0157"
},
{
"name": "pyo3@0.28.3",
"product_id": "CSAFPID-0158"
},
{
"name": "pyopenssl@25.3.0",
"product_id": "CSAFPID-0082"
},
{
"name": "pytest@8.4.1",
"product_id": "CSAFPID-0197"
},
{
"name": "pytest@8.4.2",
"product_id": "CSAFPID-0198"
},
{
"name": "python-multipart@0.0.28",
"product_id": "CSAFPID-0115"
},
{
"name": "qs@6.14.1",
"product_id": "CSAFPID-0248"
},
{
"name": "qs@6.14.2",
"product_id": "CSAFPID-0249"
},
{
"name": "qs@6.15.2",
"product_id": "CSAFPID-0250"
},
{
"name": "qs@6.15.3",
"product_id": "CSAFPID-0251"
},
{
"name": "rand@0.8.5",
"product_id": "CSAFPID-0279"
},
{
"name": "rand@0.9.0",
"product_id": "CSAFPID-0280"
},
{
"name": "rand@0.9.1",
"product_id": "CSAFPID-0281"
},
{
"name": "rand@0.9.2",
"product_id": "CSAFPID-0282"
},
{
"name": "react-router-dom@6.30.3",
"product_id": "CSAFPID-0238"
},
{
"name": "react-router-dom@6.30.4",
"product_id": "CSAFPID-0239"
},
{
"name": "react-router@6.30.1",
"product_id": "CSAFPID-0193"
},
{
"name": "react-router@6.30.3",
"product_id": "CSAFPID-0225"
},
{
"name": "react-router@6.30.4",
"product_id": "CSAFPID-0237"
},
{
"name": "redoc@2.0.0-rc.8-1",
"product_id": "CSAFPID-0037"
},
{
"name": "request@2.88.2",
"product_id": "CSAFPID-0171"
},
{
"name": "requests@2.25.1",
"product_id": "CSAFPID-0173"
},
{
"name": "requests@2.32.4",
"product_id": "CSAFPID-0216"
},
{
"name": "requests@2.32.5",
"product_id": "CSAFPID-0217"
},
{
"name": "rkyv@0.7.45",
"product_id": "CSAFPID-0310"
},
{
"name": "rubyipmi@UNKNOWN",
"product_id": "CSAFPID-0292"
},
{
"name": "rustix@0.38.9",
"product_id": "CSAFPID-0181"
},
{
"name": "rustls-pemfile@2.1.3",
"product_id": "CSAFPID-0307"
},
{
"name": "rustls-webpki@0.102.8",
"product_id": "CSAFPID-0165"
},
{
"name": "rustls-webpki@0.103.13",
"product_id": "CSAFPID-0329"
},
{
"name": "rustls-webpki@0.103.3",
"product_id": "CSAFPID-0166"
},
{
"name": "rustls-webpki@0.103.4",
"product_id": "CSAFPID-0167"
},
{
"name": "rustls@0.23.19",
"product_id": "CSAFPID-0254"
},
{
"name": "rustls@0.23.28",
"product_id": "CSAFPID-0255"
},
{
"name": "rustls@0.23.31",
"product_id": "CSAFPID-0256"
},
{
"name": "rustls@0.23.38",
"product_id": "CSAFPID-0257"
},
{
"name": "ruzstd@0.8.2",
"product_id": "CSAFPID-0323"
},
{
"name": "sanitize-html@2.17.6",
"product_id": "CSAFPID-0208"
},
{
"name": "scc@2.4.0",
"product_id": "CSAFPID-0318"
},
{
"name": "semver@7.0.0",
"product_id": "CSAFPID-0032"
},
{
"name": "serde_cbor@0.11.2",
"product_id": "CSAFPID-0298"
},
{
"name": "serialize-javascript@6.0.2",
"product_id": "CSAFPID-0160"
},
{
"name": "setuptools@53.0.0",
"product_id": "CSAFPID-0033"
},
{
"name": "setuptools@65.5.1",
"product_id": "CSAFPID-0038"
},
{
"name": "setuptools@68.2.2",
"product_id": "CSAFPID-0039"
},
{
"name": "setuptools@71.1.0",
"product_id": "CSAFPID-0043"
},
{
"name": "setuptools@80.9.0",
"product_id": "CSAFPID-0243"
},
{
"name": "setuptools@82.0.1",
"product_id": "CSAFPID-0244"
},
{
"name": "shell-quote@1.10.0",
"product_id": "CSAFPID-0007"
},
{
"name": "shell-quote@1.8.1",
"product_id": "CSAFPID-0021"
},
{
"name": "shell-quote@1.8.3",
"product_id": "CSAFPID-0022"
},
{
"name": "shell-quote@1.8.4",
"product_id": "CSAFPID-0008"
},
{
"name": "sigstore@3.1.0",
"product_id": "CSAFPID-0109"
},
{
"name": "slab@0.4.10",
"product_id": "CSAFPID-0188"
},
{
"name": "soupsieve@2.8",
"product_id": "CSAFPID-0113"
},
{
"name": "source-map-js@1.2.1",
"product_id": "CSAFPID-0148"
},
{
"name": "sprintf-js@1.0.3",
"product_id": "CSAFPID-0293"
},
{
"name": "starlette@1.0.1",
"product_id": "CSAFPID-0110"
},
{
"name": "stdlib@1.25.7",
"product_id": "CSAFPID-0064"
},
{
"name": "stdlib@1.26.7",
"product_id": "CSAFPID-0065"
},
{
"name": "tar@0.4.43",
"product_id": "CSAFPID-0220"
},
{
"name": "tar@0.4.44",
"product_id": "CSAFPID-0221"
},
{
"name": "tar@7.5.11",
"product_id": "CSAFPID-0014"
},
{
"name": "time@0.3.36",
"product_id": "CSAFPID-0218"
},
{
"name": "time@0.3.41",
"product_id": "CSAFPID-0219"
},
{
"name": "tmp@0.0.33",
"product_id": "CSAFPID-0100"
},
{
"name": "tmp@0.2.3",
"product_id": "CSAFPID-0101"
},
{
"name": "tmp@0.2.6",
"product_id": "CSAFPID-0114"
},
{
"name": "tracing-subscriber@0.3.19",
"product_id": "CSAFPID-0263"
},
{
"name": "underscore@1.13.7",
"product_id": "CSAFPID-0083"
},
{
"name": "unknown",
"product_id": "CSAFPID-0331"
},
{
"name": "urllib3@1.26.5",
"product_id": "CSAFPID-0034"
},
{
"name": "urllib3@2.6.3",
"product_id": "CSAFPID-0099"
},
{
"name": "urllib3@2.7.0",
"product_id": "CSAFPID-0151"
},
{
"name": "urllib3@UNKNOWN",
"product_id": "CSAFPID-0290"
},
{
"name": "uuid@3.4.0",
"product_id": "CSAFPID-0226"
},
{
"name": "uuid@8.0.0",
"product_id": "CSAFPID-0227"
},
{
"name": "uuid@8.3.2",
"product_id": "CSAFPID-0228"
},
{
"name": "uuid@9.0.1",
"product_id": "CSAFPID-0229"
},
{
"name": "validator@13.11.0",
"product_id": "CSAFPID-0040"
},
{
"name": "virtualenv@20.31.2",
"product_id": "CSAFPID-0055"
},
{
"name": "virtualenv@20.34.0",
"product_id": "CSAFPID-0056"
},
{
"name": "virtualenv@20.35.3",
"product_id": "CSAFPID-0057"
},
{
"name": "vue-template-compiler@2.7.16",
"product_id": "CSAFPID-0182"
},
{
"name": "webpack-dev-middleware@7.4.2",
"product_id": "CSAFPID-0137"
},
{
"name": "webpack-dev-middleware@7.4.5",
"product_id": "CSAFPID-0138"
},
{
"name": "webpack-dev-server@5.1.0",
"product_id": "CSAFPID-0186"
},
{
"name": "webpack-dev-server@5.2.3",
"product_id": "CSAFPID-0211"
},
{
"name": "webpack@5.100.0",
"product_id": "CSAFPID-0264"
},
{
"name": "webpki-root-certs@1.0.7",
"product_id": "CSAFPID-0330"
},
{
"name": "webpki-roots@0.26.2",
"product_id": "CSAFPID-0327"
},
{
"name": "webpki-roots@1.0.7",
"product_id": "CSAFPID-0328"
},
{
"name": "websocket-driver@0.7.4",
"product_id": "CSAFPID-0013"
},
{
"name": "werkzeug@3.1.3",
"product_id": "CSAFPID-0189"
},
{
"name": "werkzeug@3.1.4",
"product_id": "CSAFPID-0203"
},
{
"name": "wheel@0.45.1",
"product_id": "CSAFPID-0074"
},
{
"name": "ws@8.18.3",
"product_id": "CSAFPID-0107"
},
{
"name": "yaml@1.10.2",
"product_id": "CSAFPID-0222"
},
{
"name": "yaml@1.8.3",
"product_id": "CSAFPID-0223"
},
{
"name": "yargs-parser@11.1.1",
"product_id": "CSAFPID-0168"
},
{
"name": "zip@2.3.0",
"product_id": "CSAFPID-0324"
},
{
"name": "zip@7.2.0",
"product_id": "CSAFPID-0325"
},
{
"name": "zip@8.5.1",
"product_id": "CSAFPID-0326"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2009-3695",
"notes": [
{
"category": "description",
"text": "Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) EmailField (email address) or (2) URLField (URL) that triggers a large amount of backtracking in a regular expression."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2009-3695",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2009-3695"
}
]
},
{
"cve": "CVE-2010-3082",
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken (aka csrf_token) cookie."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2010-3082",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2010-3082"
}
]
},
{
"cve": "CVE-2010-4534",
"notes": [
{
"category": "description",
"text": "The administrative interface in django.contrib.admin in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not properly restrict use of the query string to perform certain object filtering, which allows remote authenticated users to obtain sensitive information via a series of requests containing regular expressions, as demonstrated by a created_by__password__regex parameter."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2010-4534",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2010-4534"
}
]
},
{
"cve": "CVE-2010-4535",
"notes": [
{
"category": "description",
"text": "The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of service (resource consumption) via a URL that specifies a large base36 integer."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2010-4535",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2010-4535"
}
]
},
{
"cve": "CVE-2011-0696",
"notes": [
{
"category": "description",
"text": "Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged AJAX requests that leverage a \"combination of browser plugins and redirects,\" a related issue to CVE-2011-0447."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2011-0696",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2011-0696"
}
]
},
{
"cve": "CVE-2011-0697",
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2011-0697",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2011-0697"
}
]
},
{
"cve": "CVE-2011-0698",
"notes": [
{
"category": "description",
"text": "Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session cookie, related to session replays."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2011-0698",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2011-0698"
}
]
},
{
"cve": "CVE-2011-4136",
"notes": [
{
"category": "description",
"text": "django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which allows remote attackers to modify a session by triggering use of a key that is equal to that session's identifier."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2011-4136",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2011-4136"
}
]
},
{
"cve": "CVE-2011-4137",
"notes": [
{
"category": "description",
"text": "The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which allows remote attackers to cause a denial of service (resource consumption) via a URL associated with (1) a slow response, (2) a completed TCP connection with no application data sent, or (3) a large amount of application data, a related issue to CVE-2011-1521."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2011-4137",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2011-4137"
}
]
},
{
"cve": "CVE-2011-4138",
"notes": [
{
"category": "description",
"text": "The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity through a HEAD request, but then uses a GET request for the new target URL in the case of a redirect, which might allow remote attackers to trigger arbitrary GET requests with an unintended source IP address via a crafted Location header."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2011-4138",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2011-4138"
}
]
},
{
"cve": "CVE-2011-4139",
"notes": [
{
"category": "description",
"text": "Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a crafted request."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2011-4139",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2011-4139"
}
]
},
{
"cve": "CVE-2011-4140",
"notes": [
{
"category": "description",
"text": "Django Cross-Site Request Forgery vulnerability"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2011-4140",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2011-4140"
}
]
},
{
"cve": "CVE-2011-4617",
"notes": [
{
"category": "description",
"text": "virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "CVE-2011-4617",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2011-4617"
}
]
},
{
"cve": "CVE-2012-3442",
"notes": [
{
"category": "description",
"text": "The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a data: URL."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2012-3442",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2012-3442"
}
]
},
{
"cve": "CVE-2012-3443",
"notes": [
{
"category": "description",
"text": "The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service (memory consumption) by uploading an image file."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2012-3443",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2012-3443"
}
]
},
{
"cve": "CVE-2012-3444",
"notes": [
{
"category": "description",
"text": "The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service (process or thread consumption) via a large TIFF image."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2012-3444",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2012-3444"
}
]
},
{
"cve": "CVE-2012-4520",
"notes": [
{
"category": "description",
"text": "The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2012-4520",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2012-4520"
}
]
},
{
"cve": "CVE-2012-4571",
"notes": [
{
"category": "description",
"text": "Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2012-4571",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2012-4571"
}
]
},
{
"cve": "CVE-2013-0305",
"notes": [
{
"category": "description",
"text": "The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2013-0305",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2013-0305"
}
]
},
{
"cve": "CVE-2013-0306",
"notes": [
{
"category": "description",
"text": "The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a modified max_num parameter."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2013-0306",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2013-0306"
}
]
},
{
"cve": "CVE-2013-1443",
"notes": [
{
"category": "description",
"text": "The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption) via a long password which is then hashed."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2013-1443",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2013-1443"
}
]
},
{
"cve": "CVE-2013-1633",
"notes": [
{
"category": "description",
"text": "easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2013-1633",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2013-1633"
}
]
},
{
"cve": "CVE-2013-4249",
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6.x before 1.6 beta 2 allows remote attackers to inject arbitrary web script or HTML via a URLField."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2013-4249",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2013-4249"
}
]
},
{
"cve": "CVE-2013-4315",
"notes": [
{
"category": "description",
"text": "Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWED_INCLUDE_ROOTS setting followed by a .. (dot dot) in a ssi template tag."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2013-4315",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2013-4315"
}
]
},
{
"cve": "CVE-2013-6044",
"notes": [
{
"category": "description",
"text": "The is_safe_url function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as safe even if it is not HTTP or HTTPS, which might introduce cross-site scripting (XSS) or other vulnerabilities into Django applications that use this function, as demonstrated by \"the login view in django.contrib.auth.views\" and the javascript: scheme."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2013-6044",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2013-6044"
}
]
},
{
"cve": "CVE-2014-0012",
"notes": [
{
"category": "description",
"text": "FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2014-0012",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2014-0012"
}
]
},
{
"cve": "CVE-2014-0472",
"notes": [
{
"category": "description",
"text": "The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Python modules by leveraging a view that constructs URLs using user input and a \"dotted Python path.\""
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2014-0472",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2014-0472"
}
]
},
{
"cve": "CVE-2014-0473",
"notes": [
{
"category": "description",
"text": "The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to bypass CSRF protections by reading the CSRF cookie for anonymous users."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2014-0473",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2014-0473"
}
]
},
{
"cve": "CVE-2014-0474",
"notes": [
{
"category": "description",
"text": "The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not properly perform type conversion, which allows remote attackers to have unspecified impact and vectors, related to \"MySQL typecasting.\""
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2014-0474",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2014-0474"
}
]
},
{
"cve": "CVE-2014-0480",
"notes": [
{
"category": "description",
"text": "The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attackers to conduct phishing attacks via a // (slash slash) in a URL, which triggers a scheme-relative URL to be generated."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2014-0480",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2014-0480"
}
]
},
{
"cve": "CVE-2014-0481",
"notes": [
{
"category": "description",
"text": "The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential file name generation process when a file with a conflicting name is uploaded, which allows remote attackers to cause a denial of service (CPU consumption) by unloading a multiple files with the same name."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2014-0481",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2014-0481"
}
]
},
{
"cve": "CVE-2014-0482",
"notes": [
{
"category": "description",
"text": "The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2014-0482",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2014-0482"
}
]
},
{
"cve": "CVE-2014-0483",
"notes": [
{
"category": "description",
"text": "The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a field represents a relationship between models, which allows remote authenticated users to obtain sensitive information via a to_field parameter in a popup action to an admin change form page, as demonstrated by a /admin/auth/user/?pop=1&t=password URI."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2014-0483",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2014-0483"
}
]
},
{
"cve": "CVE-2014-1402",
"notes": [
{
"category": "description",
"text": "The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with __jinja2_ in /tmp."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2014-1402",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2014-1402"
}
]
},
{
"cve": "CVE-2014-1418",
"notes": [
{
"category": "description",
"text": "Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control header in responses, which allows remote attackers to obtain sensitive information or poison the cache via a request from certain browsers."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2014-1418",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2014-1418"
}
]
},
{
"cve": "CVE-2014-3007",
"notes": [
{
"category": "description",
"text": "Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2014-3007",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2014-3007"
}
]
},
{
"cve": "CVE-2014-3589",
"notes": [
{
"category": "description",
"text": "PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2014-3589",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2014-3589"
}
]
},
{
"cve": "CVE-2014-3730",
"notes": [
{
"category": "description",
"text": "The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduct open redirect attacks via a malformed URL, as demonstrated by \"http:\\\\\\djangoproject.com.\""
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2014-3730",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2014-3730"
}
]
},
{
"cve": "CVE-2015-0219",
"notes": [
{
"category": "description",
"text": "Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers to spoof WSGI headers by using an _ (underscore) character instead of a - (dash) character in an HTTP header, as demonstrated by an X-Auth_User header."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-0219",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-0219"
}
]
},
{
"cve": "CVE-2015-0220",
"notes": [
{
"category": "description",
"text": "The django.util.http.is_safe_url function in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 does not properly handle leading whitespaces, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL, related to redirect URLs, as demonstrated by a \"\\njavascript:\" URL."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-0220",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-0220"
}
]
},
{
"cve": "CVE-2015-0221",
"notes": [
{
"category": "description",
"text": "The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-0221",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-0221"
}
]
},
{
"cve": "CVE-2015-0222",
"notes": [
{
"category": "description",
"text": "ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-0222",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-0222"
}
]
},
{
"cve": "CVE-2015-2241",
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a model attribute in ModelAdmin.readonly_fields, as demonstrated by a @property."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-2241",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-2241"
}
]
},
{
"cve": "CVE-2015-2296",
"notes": [
{
"category": "description",
"text": "The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-2296",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-2296"
}
]
},
{
"cve": "CVE-2015-2316",
"notes": [
{
"category": "description",
"text": "The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of service (infinite loop) by increasing the length of the input string."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-2316",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-2316"
}
]
},
{
"cve": "CVE-2015-2317",
"notes": [
{
"category": "description",
"text": "The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a control character in a URL, as demonstrated by a \\x08javascript: URL."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-2317",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-2317"
}
]
},
{
"cve": "CVE-2015-3295",
"notes": [
{
"category": "description",
"text": "markdown-it before 4.1.0 does not block data: URLs."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-3295",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-3295"
}
]
},
{
"cve": "CVE-2015-3982",
"notes": [
{
"category": "description",
"text": "The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-3982",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-3982"
}
]
},
{
"cve": "CVE-2015-5143",
"notes": [
{
"category": "description",
"text": "The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-5143",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-5143"
}
]
},
{
"cve": "CVE-2015-5144",
"notes": [
{
"category": "description",
"text": "Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-5144",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-5144"
}
]
},
{
"cve": "CVE-2015-5145",
"notes": [
{
"category": "description",
"text": "validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-5145",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-5145"
}
]
},
{
"cve": "CVE-2015-5963",
"notes": [
{
"category": "description",
"text": "contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service (session store consumption or session record removal) via a large number of requests to contrib.auth.views.logout, which triggers the creation of an empty session record."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-5963",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-5963"
}
]
},
{
"cve": "CVE-2015-5964",
"notes": [
{
"category": "description",
"text": "The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service (session store consumption) via unspecified vectors."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-5964",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-5964"
}
]
},
{
"cve": "CVE-2015-8213",
"notes": [
{
"category": "description",
"text": "The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRET_KEY."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2015-8213",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2015-8213"
}
]
},
{
"cve": "CVE-2016-10554",
"notes": [
{
"category": "description",
"text": "sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. Before version 1.7.0-alpha3, sequelize defaulted SQLite to use MySQL backslash escaping, even though SQLite uses Postgres escaping."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2016-10554",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2016-10554"
}
]
},
{
"cve": "CVE-2016-2048",
"notes": [
{
"category": "description",
"text": "Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the \"Save as New\" option when editing objects and leveraging the \"change\" permission."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2016-2048",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2016-2048"
}
]
},
{
"cve": "CVE-2016-2512",
"notes": [
{
"category": "description",
"text": "The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting (XSS) attacks via a URL containing basic authentication, as demonstrated by http://mysite.example.com\\@attacker.com."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2016-2512",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2016-2512"
}
]
},
{
"cve": "CVE-2016-2513",
"notes": [
{
"category": "description",
"text": "The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2016-2513",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2016-2513"
}
]
},
{
"cve": "CVE-2016-3076",
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2016-3076",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2016-3076"
}
]
},
{
"cve": "CVE-2016-6186",
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors involving unsafe usage of Element.innerHTML."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2016-6186",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2016-6186"
}
]
},
{
"cve": "CVE-2016-6581",
"notes": [
{
"category": "description",
"text": "A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called \"HPACK Bomb\" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK dynamic header table into the dynamic header table. The attacker can then send a header block that is simply repeated requests to expand that field in the dynamic table. This can lead to a gigantic compression ratio of 4,096 or better, meaning that 16kB of data can decompress to 64MB of data on the target machine."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2016-6581",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2016-6581"
}
]
},
{
"cve": "CVE-2016-7401",
"notes": [
{
"category": "description",
"text": "The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2016-7401",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2016-7401"
}
]
},
{
"cve": "CVE-2016-9013",
"notes": [
{
"category": "description",
"text": "Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2016-9013",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2016-9013"
}
]
},
{
"cve": "CVE-2016-9014",
"notes": [
{
"category": "description",
"text": "Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2016-9014",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2016-9014"
}
]
},
{
"cve": "CVE-2016-9015",
"notes": [
{
"category": "description",
"text": "Urllib3 Incorrect Certificate Validation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2016-9015",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2016-9015"
}
]
},
{
"cve": "CVE-2017-1000048",
"notes": [
{
"category": "description",
"text": "the web framework using ljharb's qs module older than v6.3.2, v6.2.3, v6.1.2, and v6.0.4 is vulnerable to a DoS. A malicious user can send a evil request to cause the web framework crash."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2017-1000048",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2017-1000048"
}
]
},
{
"cve": "CVE-2017-12794",
"notes": [
{
"category": "description",
"text": "In Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5, HTML autoescaping was disabled in a portion of the template for the technical 500 debug page. Given the right circumstances, this allowed a cross-site scripting attack. This vulnerability shouldn't affect most production sites since you shouldn't run with \"DEBUG = True\" (which makes this page accessible) in your production settings."
},
{
"category": "other",
"text": "A public nuclei exploit template exists (severity: medium).",
"title": "Nuclei template"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2017-12794",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2017-12794"
}
]
},
{
"cve": "CVE-2017-16023",
"notes": [
{
"category": "description",
"text": "Decamelize is used to convert a dash/dot/underscore/space separated string to camelCase. Decamelize 1.1.0 through 1.1.1 uses regular expressions to evaluate a string and takes unescaped separator values, which can be used to create a denial of service attack."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2017-16023",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2017-16023"
}
]
},
{
"cve": "CVE-2017-18589",
"notes": [
{
"category": "description",
"text": "An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.7.6 or later.",
"product_ids": [
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2017-18589",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2017-18589"
}
]
},
{
"cve": "CVE-2017-7233",
"notes": [
{
"category": "description",
"text": "Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an \"on success\" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URLs \"safe\" when they shouldn't be, aka an open redirect vulnerability. Also, if a developer relies on ``is_safe_url()`` to provide safe redirect targets and puts such a URL into a link, they could suffer from an XSS attack."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2017-7233",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2017-7233"
}
]
},
{
"cve": "CVE-2017-7234",
"notes": [
{
"category": "description",
"text": "A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` view could redirect to any other domain, aka an open redirect vulnerability."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2017-7234",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2017-7234"
}
]
},
{
"cve": "CVE-2018-1000518",
"notes": [
{
"category": "description",
"text": "aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2018-1000518",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2018-1000518"
}
]
},
{
"cve": "CVE-2018-20060",
"notes": [
{
"category": "description",
"text": "Exposure of Sensitive Information to an Unauthorized Actor in urllib3"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0290",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0290",
"CSAFPID-0331"
]
}
],
"title": "GHSA-www2-v7xj-xrc6",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2018-20060"
}
]
},
{
"cve": "CVE-2018-20225",
"notes": [
{
"category": "description",
"text": "An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2018-20225",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2018-20225"
}
]
},
{
"cve": "CVE-2018-25091",
"notes": [
{
"category": "description",
"text": "Authorization Header forwarded on redirect"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0290",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0290",
"CSAFPID-0331"
]
}
],
"title": "GHSA-gwvm-45gx-3cf8",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2018-25091"
}
]
},
{
"cve": "CVE-2018-6188",
"notes": [
{
"category": "description",
"text": "django.contrib.auth.forms.AuthenticationForm in Django 2.0 before 2.0.2, and 1.11.8 and 1.11.9, allows remote attackers to obtain potentially sensitive information by leveraging data exposure from the confirm_login_allowed() method, as demonstrated by discovering whether a user account is inactive."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2018-6188",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2018-6188"
}
]
},
{
"cve": "CVE-2019-11236",
"notes": [
{
"category": "description",
"text": "Improper Neutralization of CRLF Sequences in urllib3 library for Python"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0290",
"CSAFPID-0331"
]
},
"title": "GHSA-r64q-w8jr-g9qp",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2019-11236"
}
]
},
{
"cve": "CVE-2019-11324",
"notes": [
{
"category": "description",
"text": "Improper Certificate Validation in urllib3"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0290",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0290",
"CSAFPID-0331"
]
}
],
"title": "GHSA-mh33-7rrq-662w",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2019-11324"
}
]
},
{
"cve": "CVE-2019-15599",
"notes": [
{
"category": "description",
"text": "A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the command."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2019-15599",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2019-15599"
}
]
},
{
"cve": "CVE-2019-16728",
"notes": [
{
"category": "description",
"text": "DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS (m ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.0.3 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2019-16728",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2019-16728"
}
]
},
{
"cve": "CVE-2019-19844",
"notes": [
{
"category": "description",
"text": "Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a password reset token for the matched user account. (One mitigation in the new releases is to send password reset tokens only to the registered user email address.)"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2019-19844",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2019-19844"
}
]
},
{
"cve": "CVE-2019-20149",
"notes": [
{
"category": "description",
"text": "ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2019-20149",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2019-20149"
}
]
},
{
"cve": "CVE-2019-8341",
"notes": [
{
"category": "description",
"text": "An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the \"source\" parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid because users shouldn't use untrusted templates without sandboxing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2019-8341",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2019-8341"
}
]
},
{
"cve": "CVE-2020-13530",
"notes": [
{
"category": "description",
"text": "A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A large number of network requests in a small span of time can cause the running program to stop. An attacker can send a sequence of requests to trigger this vulnerability."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2020-13530",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2020-13530"
}
]
},
{
"cve": "CVE-2020-13556",
"notes": [
{
"category": "description",
"text": "An out-of-bounds write vulnerability exists in the Ethernet/IP server functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2020-13556",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2020-13556"
}
]
},
{
"cve": "CVE-2020-15168",
"notes": [
{
"category": "description",
"text": "node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are relying on node-fetch to gate files above a size, the impact could be significant, for example: If you don't double-check the size of the data after fetch() has completed, your JS thread could get tied up doing work on a large file (DoS) and/or cost you money in computing."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2020-15168",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2020-15168"
}
]
},
{
"cve": "CVE-2020-25659",
"notes": [
{
"category": "description",
"text": "python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2020-25659",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2020-25659"
}
]
},
{
"cve": "CVE-2020-26137",
"notes": [
{
"category": "description",
"text": "CRLF injection in urllib3"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0290",
"CSAFPID-0331"
]
},
"title": "GHSA-wqvq-5m8c-6g24",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2020-26137"
}
]
},
{
"cve": "CVE-2020-26870",
"notes": [
{
"category": "description",
"text": "Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs becaus ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.0.17 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2020-26870",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2020-26870"
}
]
},
{
"cve": "CVE-2020-7212",
"notes": [
{
"category": "description",
"text": "Uncontrolled Resource Consumption in urllib3"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2020-7212",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2020-7212"
}
]
},
{
"cve": "CVE-2020-7608",
"notes": [
{
"category": "description",
"text": "nodejs-yargs-parser: prototype pollution vulnerability"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0168",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 13.1.2, 15.0.1, 18.1.1, 5.0.1 or later.",
"product_ids": [
"CSAFPID-0168",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0168",
"CSAFPID-0331"
]
}
],
"title": "CVE-2020-7608",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2020-7608"
}
]
},
{
"cve": "CVE-2020-7774",
"notes": [
{
"category": "description",
"text": "The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2020-7774",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2020-7774"
}
]
},
{
"cve": "CVE-2020-8141",
"notes": [
{
"category": "description",
"text": "The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2020-8141",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2020-8141"
}
]
},
{
"cve": "CVE-2020-8908",
"notes": [
{
"category": "description",
"text": "guava: local information disclosure via temporary directory created with unsafe permissions"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0172",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 32.0.0-android or later.",
"product_ids": [
"CSAFPID-0172",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 3.3,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0172",
"CSAFPID-0331"
]
}
],
"title": "CVE-2020-8908",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2020-8908"
}
]
},
{
"cve": "CVE-2020-8911",
"notes": [
{
"category": "description",
"text": "CBC padding oracle issue in AWS S3 Crypto SDK for golang in github.com/aws/aws-sdk-go"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0294",
"CSAFPID-0295",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0294",
"CSAFPID-0295",
"CSAFPID-0331"
]
}
],
"title": "GO-2022-0646",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2020-8911"
}
]
},
{
"cve": "CVE-2020-8912",
"notes": [
{
"category": "description",
"text": "In-band key negotiation issue in AWS S3 Crypto SDK for golang in github.com/aws/aws-sdk-go"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0294",
"CSAFPID-0295",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0294",
"CSAFPID-0295",
"CSAFPID-0331"
]
}
],
"title": "GO-2022-0635",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2020-8912"
}
]
},
{
"cve": "CVE-2021-20066",
"notes": [
{
"category": "description",
"text": "JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2021-20066",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2021-20066"
}
]
},
{
"cve": "CVE-2021-21353",
"notes": [
{
"category": "description",
"text": "pug: user provided objects as input to pug templates can achieve remote code execution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0169",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.0.1 or later.",
"product_ids": [
"CSAFPID-0169",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0169",
"CSAFPID-0331"
]
}
],
"title": "CVE-2021-21353",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2021-21353"
}
]
},
{
"cve": "CVE-2021-21777",
"notes": [
{
"category": "description",
"text": "An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A specially crafted network request can lead to an out-of-bounds read."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2021-21777",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2021-21777"
}
]
},
{
"cve": "CVE-2021-23337",
"notes": [
{
"category": "description",
"text": "lodash vulnerable to Code Injection via `_.template` imports key names"
},
{
"category": "other",
"text": "A public nuclei exploit template exists (severity: high).",
"title": "Nuclei template"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.18.0 or later.",
"product_ids": [
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2021-23337",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2021-23337"
}
]
},
{
"cve": "CVE-2021-23807",
"notes": [
{
"category": "description",
"text": "nodejs-jsonpointer: type confusion vulnerability can lead to a bypass of a previous prototype pollution fix when the pointer components are arrays"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0170",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.0.0 or later.",
"product_ids": [
"CSAFPID-0170",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0170",
"CSAFPID-0331"
]
}
],
"title": "CVE-2021-23807",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2021-23807"
}
]
},
{
"cve": "CVE-2021-23820",
"notes": [
{
"category": "description",
"text": "json-pointer: type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.6.2 or later.",
"product_ids": [
"CSAFPID-0002",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0002",
"CSAFPID-0331"
]
}
],
"title": "CVE-2021-23820",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2021-23820"
}
]
},
{
"cve": "CVE-2021-28363",
"notes": [
{
"category": "description",
"text": "Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2021-28363",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2021-28363"
}
]
},
{
"cve": "CVE-2021-33026",
"notes": [
{
"category": "description",
"text": "Deserialization of Untrusted Data in Flask-Caching"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2021-33026",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2021-33026"
}
]
},
{
"cve": "CVE-2021-33503",
"notes": [
{
"category": "description",
"text": "Catastrophic backtracking in URL authority parser when passed URL containing many @ characters"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2021-33503",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2021-33503"
}
]
},
{
"cve": "CVE-2021-33587",
"notes": [
{
"category": "description",
"text": "The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2021-33587",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2021-33587"
}
]
},
{
"cve": "CVE-2021-3807",
"notes": [
{
"category": "description",
"text": "ansi-regex is vulnerable to Inefficient Regular Expression Complexity"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2021-3807",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2021-3807"
}
]
},
{
"cve": "CVE-2021-42523",
"notes": [
{
"category": "description",
"text": "There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2021-42523",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2021-42523"
}
]
},
{
"cve": "CVE-2021-43138",
"notes": [
{
"category": "description",
"text": "In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.6.4 or later.",
"product_ids": [
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2021-43138",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2021-43138"
}
]
},
{
"cve": "CVE-2021-43309",
"notes": [
{
"category": "description",
"text": "An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the \"URI.expand\" method"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2021-43309",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2021-43309"
}
]
},
{
"cve": "CVE-2021-45696",
"notes": [
{
"category": "description",
"text": "An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2021-45696",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2021-45696"
}
]
},
{
"cve": "CVE-2022-0235",
"notes": [
{
"category": "description",
"text": "node-fetch: exposure of sensitive information to an unauthorized actor"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0029",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.1.1, 2.6.7 or later.",
"product_ids": [
"CSAFPID-0029",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0029",
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-0235",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-0235"
}
]
},
{
"cve": "CVE-2022-21680",
"notes": [
{
"category": "description",
"text": "marked: regular expression block.def may lead Denial of Service"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0030",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.0.10 or later.",
"product_ids": [
"CSAFPID-0030",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0030",
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-21680",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-21680"
}
]
},
{
"cve": "CVE-2022-21681",
"notes": [
{
"category": "description",
"text": "marked: regular expression inline.reflinkSearch may lead Denial of Service"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0030",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.0.10 or later.",
"product_ids": [
"CSAFPID-0030",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0030",
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-21681",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-21681"
}
]
},
{
"cve": "CVE-2022-21803",
"notes": [
{
"category": "description",
"text": "nconf: Prototype pollution in memory store"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0031",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.11.4 or later.",
"product_ids": [
"CSAFPID-0031",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0031",
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-21803",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-21803"
}
]
},
{
"cve": "CVE-2022-24999",
"notes": [
{
"category": "description",
"text": "qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used to visit the application, such as a[__proto__]=b&a[__proto__]&a[length]=100000000. The fix was backported to qs 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, and 6.2.4 (and therefore Express 4.17.3, which has \"deps: qs@6.9.7\" in its release description, is not vulnerable)."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-24999",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-24999"
}
]
},
{
"cve": "CVE-2022-25883",
"notes": [
{
"category": "description",
"text": "nodejs-semver: Regular expression denial of service"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0032",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 7.5.2, 6.3.1, 5.7.2 or later.",
"product_ids": [
"CSAFPID-0032",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0032",
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-25883",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-25883"
}
]
},
{
"cve": "CVE-2022-29078",
"notes": [
{
"category": "description",
"text": "ejs: server-side template injection in outputFunctionName"
},
{
"category": "other",
"text": "A public nuclei exploit template exists (severity: critical).",
"title": "Nuclei template"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.1.7 or later.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0001",
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-29078",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-29078"
}
]
},
{
"cve": "CVE-2022-29622",
"notes": [
{
"category": "description",
"text": "An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted filename. NOTE: some third parties dispute this issue because the product has common use cases in which uploading arbitrary files is the desired behavior. Also, there are configuration options in all versions that can change the default behavior of how files are handled. Strapi does not consider this to be a valid vulnerability."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-29622",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-29622"
}
]
},
{
"cve": "CVE-2022-30595",
"notes": [
{
"category": "description",
"text": "libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-30595",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-30595"
}
]
},
{
"cve": "CVE-2022-32434",
"notes": [
{
"category": "description",
"text": "EIPStackGroup OpENer v2.3.0 was discovered to contain a stack overflow via /bin/posix/src/ports/POSIX/OpENer+0x56073d."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-32434",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-32434"
}
]
},
{
"cve": "CVE-2022-36313",
"notes": [
{
"category": "description",
"text": "An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file could cause the file type detector to get caught in an infinite loop. This would make the application become unresponsive and could be used to cause a DoS attack."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 16.5.4 or later.",
"product_ids": [
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-36313",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-36313"
}
]
},
{
"cve": "CVE-2022-37609",
"notes": [
{
"category": "description",
"text": "Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-37609",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-37609"
}
]
},
{
"cve": "CVE-2022-37620",
"notes": [
{
"category": "description",
"text": "A Regular Expression Denial of Service (ReDoS) flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 7.2.0 or later.",
"product_ids": [
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-37620",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-37620"
}
]
},
{
"cve": "CVE-2022-38900",
"notes": [
{
"category": "description",
"text": "decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-38900",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-38900"
}
]
},
{
"cve": "CVE-2022-40897",
"notes": [
{
"category": "description",
"text": "pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0033",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 65.5.1 or later.",
"product_ids": [
"CSAFPID-0033",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0033",
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-40897",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-40897"
}
]
},
{
"cve": "CVE-2022-4742",
"notes": [
{
"category": "description",
"text": "json-pointer: prototype pollution in json-pointer"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0002",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.6.2 or later.",
"product_ids": [
"CSAFPID-0002",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0002",
"CSAFPID-0331"
]
}
],
"title": "CVE-2022-4742",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2022-4742"
}
]
},
{
"cve": "CVE-2023-0842",
"notes": [
{
"category": "description",
"text": "xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the __proto__ property to be edited."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "CVE-2023-0842",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-0842"
}
]
},
{
"cve": "CVE-2023-22578",
"notes": [
{
"category": "description",
"text": "Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "CVE-2023-22578",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-22578"
}
]
},
{
"cve": "CVE-2023-22579",
"notes": [
{
"category": "description",
"text": "Due to improper parameter filtering in the sequalize js library, can a attacker peform injection."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "CVE-2023-22579",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-22579"
}
]
},
{
"cve": "CVE-2023-22580",
"notes": [
{
"category": "description",
"text": "Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "CVE-2023-22580",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-22580"
}
]
},
{
"cve": "CVE-2023-26964",
"notes": [
{
"category": "description",
"text": "An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RST_STREAM frames. As a result, the memory and CPU usage are high which can lead to a Denial of Service (DoS)."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2023-26964",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-26964"
}
]
},
{
"cve": "CVE-2023-28155",
"notes": [
{
"category": "description",
"text": "request: bypass of SSRF mitigations when following a cross-protocol redirect"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0171",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0171",
"CSAFPID-0331"
]
}
],
"title": "CVE-2023-28155",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-28155"
}
]
},
{
"cve": "CVE-2023-2976",
"notes": [
{
"category": "description",
"text": "guava: insecure temporary directory creation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0172",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 32.0.0-android or later.",
"product_ids": [
"CSAFPID-0172",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0172",
"CSAFPID-0331"
]
}
],
"title": "CVE-2023-2976",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-2976"
}
]
},
{
"cve": "CVE-2023-31047",
"notes": [
{
"category": "description",
"text": "In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django's \"Uploading multiple files\" documentation suggested otherwise."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2023-31047",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-31047"
}
]
},
{
"cve": "CVE-2023-32681",
"notes": [
{
"category": "description",
"text": "python-requests: Unintended leak of Proxy-Authorization header"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0173",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.31.0 or later.",
"product_ids": [
"CSAFPID-0173",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0173",
"CSAFPID-0331"
]
}
],
"title": "CVE-2023-32681",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-32681"
}
]
},
{
"cve": "CVE-2023-4316",
"notes": [
{
"category": "description",
"text": "Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2023-4316",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-4316"
}
]
},
{
"cve": "CVE-2023-43804",
"notes": [
{
"category": "description",
"text": "python-urllib3: Cookie request header isn't stripped during cross-origin redirects"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0034",
"CSAFPID-0290",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.0.6, 1.26.17 or later.",
"product_ids": [
"CSAFPID-0034",
"CSAFPID-0290",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0034",
"CSAFPID-0290",
"CSAFPID-0331"
]
}
],
"title": "CVE-2023-43804",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-43804"
}
]
},
{
"cve": "CVE-2023-45288",
"notes": [
{
"category": "description",
"text": "golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.23.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0331"
]
}
],
"title": "CVE-2023-45288",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-45288"
}
]
},
{
"cve": "CVE-2023-45803",
"notes": [
{
"category": "description",
"text": "urllib3: Request body not stripped after redirect from 303 status changes request method to GET"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0034",
"CSAFPID-0290",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.0.7, 1.26.18 or later.",
"product_ids": [
"CSAFPID-0034",
"CSAFPID-0290",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0034",
"CSAFPID-0290",
"CSAFPID-0331"
]
}
],
"title": "CVE-2023-45803",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-45803"
}
]
},
{
"cve": "CVE-2023-45813",
"notes": [
{
"category": "description",
"text": "Torbot is an open source tor network intelligence tool. In affected versions the `torbot.modules.validators.validate_link function` uses the python-validators URL validation regex. This particular regular expression has an exponential complexity which allows an attacker to cause an application crash using a well-crafted argument. An attacker can use a well-crafted URL argument to exploit the vulnerability in the regular expression and cause a Denial of Service on the system. The validators file has been removed in version 4.0.0. Users are advised to upgrade. There are no known workarounds for this vulnerability."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2023-45813",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-45813"
}
]
},
{
"cve": "CVE-2023-45857",
"notes": [
{
"category": "description",
"text": "An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2023-45857",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-45857"
}
]
},
{
"cve": "CVE-2023-46136",
"notes": [
{
"category": "description",
"text": "Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2023-46136",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-46136"
}
]
},
{
"cve": "CVE-2023-5189",
"notes": [
{
"category": "description",
"text": "Ansible galaxy-importer Path Traversal vulnerability"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2023-5189",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-5189"
}
]
},
{
"cve": "CVE-2023-5752",
"notes": [
{
"category": "description",
"text": "pip: Mercurial configuration injectable in repo revision when installing via pip"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 23.3 or later.",
"product_ids": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 3.3,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0331"
]
}
],
"title": "CVE-2023-5752",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2023-5752"
}
]
},
{
"cve": "CVE-2024-10039",
"notes": [
{
"category": "description",
"text": "keycloak-core: mTLS passthrough"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0036",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 26.0.6 or later.",
"product_ids": [
"CSAFPID-0036",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0036",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-10039",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-10039"
}
]
},
{
"cve": "CVE-2024-13278",
"notes": [
{
"category": "description",
"text": "Incorrect Authorization vulnerability in Drupal Diff allows Functionality Misuse.This issue affects Diff: from 0.0.0 before 1.8.0."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-13278",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-13278"
}
]
},
{
"cve": "CVE-2024-21503",
"notes": [
{
"category": "description",
"text": "psf/black: ReDoS via the lines_with_leading_tabs_expanded() function in strings.py file"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0176",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 24.3.0 or later.",
"product_ids": [
"CSAFPID-0176",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0176",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-21503",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-21503"
}
]
},
{
"cve": "CVE-2024-21742",
"notes": [
{
"category": "description",
"text": "Mime4J: Mime4J DOM header injection"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0177",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.8.10 or later.",
"product_ids": [
"CSAFPID-0177",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0177",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-21742",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-21742"
}
]
},
{
"cve": "CVE-2024-24786",
"notes": [
{
"category": "description",
"text": "google.golang.org/protobuf: golang-protobuf: Denial of Service via infinite loop when unmarshaling invalid JSON"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0178",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.33.0 or later.",
"product_ids": [
"CSAFPID-0178",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0178",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-24786",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-24786"
}
]
},
{
"cve": "CVE-2024-27308",
"notes": [
{
"category": "description",
"text": "Mio is a Metal I/O library for Rust. When using named pipes on Windows, mio will under some circumstances return invalid tokens that correspond to named pipes that have already been deregistered from the mio registry. The impact of this vulnerability depends on how mio is used. For some applications, invalid tokens may be ignored or cause a warning or a crash. On the other hand, for applications that store pointers in the tokens, this vulnerability may result in a use-after-free. For users of Tokio, this vulnerability is serious and can result in a use-after-free in Tokio. The vulnerability is Windows-specific, and can only happen if you are using named pipes. Other IO resources are not affected. This vulnerability has been fixed in mio v0.8.11. All versions of mio between v0.7.2 and v0.8.10 are vulnerable. Tokio is vulnerable when you are using a vulnerable version of mio AND you are using at least Tokio v1.30.0. Versions of Tokio prior to v1.30.0 will ignore invalid tokens, so they are not vulnerable. Vulnerable libraries that use mio can work around this issue by detecting and ignoring invalid tokens."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-27308",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-27308"
}
]
},
{
"cve": "CVE-2024-29041",
"notes": [
{
"category": "description",
"text": "Express.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a user-provided URL Express performs an encode [using `encodeurl`](https://github.com/pillarjs/encodeurl) on the contents before passing it to the `location` header. This can cause malformed URLs to be evaluated in unexpected ways by common redirect allow list implementations in Express applications, leading to an Open Redirect via bypass of a properly implemented allow list. The main method impacted is `res.location()` but this is also called from within `res.redirect()`. The vulnerability is fixed in 4.19.2 and 5.0.0-beta.3."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-29041",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-29041"
}
]
},
{
"cve": "CVE-2024-33883",
"notes": [
{
"category": "description",
"text": "The ejs (aka Embedded JavaScript templates) package before 3.1.10 for ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.1.10 or later.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0001",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-33883",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-33883"
}
]
},
{
"cve": "CVE-2024-35195",
"notes": [
{
"category": "description",
"text": "requests: subsequent requests to the same host ignore cert verification"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0173",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.32.0 or later.",
"product_ids": [
"CSAFPID-0173",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0173",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-35195",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-35195"
}
]
},
{
"cve": "CVE-2024-36361",
"notes": [
{
"category": "description",
"text": "Pug allows JavaScript code execution if an application accepts untrusted input"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0169",
"CSAFPID-0179",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.0.3 or later.",
"product_ids": [
"CSAFPID-0169",
"CSAFPID-0179",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0169",
"CSAFPID-0179",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-36361",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-36361"
}
]
},
{
"cve": "CVE-2024-3651",
"notes": [
{
"category": "description",
"text": "python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0180",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.7 or later.",
"product_ids": [
"CSAFPID-0180",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0180",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-3651",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-3651"
}
]
},
{
"cve": "CVE-2024-37891",
"notes": [
{
"category": "description",
"text": "urllib3: proxy-authorization request header is not stripped during cross-origin redirects"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0034",
"CSAFPID-0290",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.26.19, 2.2.2 or later.",
"product_ids": [
"CSAFPID-0034",
"CSAFPID-0290",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0034",
"CSAFPID-0290",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-37891",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-37891"
}
]
},
{
"cve": "CVE-2024-4028",
"notes": [
{
"category": "description",
"text": "keycloak-core: Stored XSS in Keycloak when creating a items in Admin Console"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0036",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 3.8,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0036",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-4028",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-4028"
}
]
},
{
"cve": "CVE-2024-43796",
"notes": [
{
"category": "description",
"text": "Express.js minimalist web framework for node. In express < 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect() may execute untrusted code. This issue is patched in express 4.20.0."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-43796",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-43796"
}
]
},
{
"cve": "CVE-2024-43806",
"notes": [
{
"category": "description",
"text": "Rustix is a set of safe Rust bindings to POSIX-ish APIs. When using `r ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0181",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.35.15, 0.36.16, 0.37.25, 0.38.19 or later.",
"product_ids": [
"CSAFPID-0181",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0181",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-43806",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-43806"
}
]
},
{
"cve": "CVE-2024-45230",
"notes": [
{
"category": "description",
"text": "An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-45230",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-45230"
}
]
},
{
"cve": "CVE-2024-45231",
"notes": [
{
"category": "description",
"text": "An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing)."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-45231",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-45231"
}
]
},
{
"cve": "CVE-2024-45296",
"notes": [
{
"category": "description",
"text": "path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0106",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.1.13 or later.",
"product_ids": [
"CSAFPID-0106",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0106",
"CSAFPID-0331"
]
}
],
"title": "GHSA-37ch-88jc-xwx2",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-45296"
}
]
},
{
"cve": "CVE-2024-45338",
"notes": [
{
"category": "description",
"text": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.33.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-45338",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-45338"
}
]
},
{
"cve": "CVE-2024-45801",
"notes": [
{
"category": "description",
"text": "dompurify: XSS vulnerability via prototype pollution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.5.4, 3.1.3 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-45801",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-45801"
}
]
},
{
"cve": "CVE-2024-47081",
"notes": [
{
"category": "description",
"text": "requests: Requests vulnerable to .netrc credentials leak via malicious URLs"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0173",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.32.4 or later.",
"product_ids": [
"CSAFPID-0173",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0173",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-47081",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-47081"
}
]
},
{
"cve": "CVE-2024-47875",
"notes": [
{
"category": "description",
"text": "dompurify: nesting-based mutation XSS vulnerability"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.5.0, 3.1.3 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-47875",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-47875"
}
]
},
{
"cve": "CVE-2024-48910",
"notes": [
{
"category": "description",
"text": "dompurify: DOMPurify vulnerable to tampering by prototype pollution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.4.2 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-48910",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-48910"
}
]
},
{
"cve": "CVE-2024-57083",
"notes": [
{
"category": "description",
"text": "redoc: Prototype Pollution in redoc"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0037",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.4.0 or later.",
"product_ids": [
"CSAFPID-0037",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0037",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-57083",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-57083"
}
]
},
{
"cve": "CVE-2024-6345",
"notes": [
{
"category": "description",
"text": "pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0033",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 70.0.0 or later.",
"product_ids": [
"CSAFPID-0033",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0033",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-6345",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-6345"
}
]
},
{
"cve": "CVE-2024-6783",
"notes": [
{
"category": "description",
"text": "vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0182",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.0.0 or later.",
"product_ids": [
"CSAFPID-0182",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0182",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-6783",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-6783"
}
]
},
{
"cve": "CVE-2024-7143",
"notes": [
{
"category": "description",
"text": "Pulp incorrectly assigns RBAC permissions in tasks that create objects"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-7143",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-7143"
}
]
},
{
"cve": "CVE-2024-7318",
"notes": [
{
"category": "description",
"text": "keycloak-core: One Time Passcode (OTP) is valid longer than expiration timeSeverity"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0036",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 24.0.7, 25.0.4 or later.",
"product_ids": [
"CSAFPID-0036",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0036",
"CSAFPID-0331"
]
}
],
"title": "CVE-2024-7318",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2024-7318"
}
]
},
{
"cve": "CVE-2025-11226",
"notes": [
{
"category": "description",
"text": "ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0183",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.5.19, 1.3.16 or later.",
"product_ids": [
"CSAFPID-0183",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0183",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-11226",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-11226"
}
]
},
{
"cve": "CVE-2025-12758",
"notes": [
{
"category": "description",
"text": "Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0040",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 13.15.22 or later.",
"product_ids": [
"CSAFPID-0040",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0040",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-12758",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-12758"
}
]
},
{
"cve": "CVE-2025-12816",
"notes": [
{
"category": "description",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0041",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.3.2 or later.",
"product_ids": [
"CSAFPID-0041",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0041",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-12816",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-12816"
}
]
},
{
"cve": "CVE-2025-13465",
"notes": [
{
"category": "description",
"text": "lodash: prototype pollution in _.unset and _.omit functions"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0103",
"CSAFPID-0105",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.17.23 or later.",
"product_ids": [
"CSAFPID-0103",
"CSAFPID-0105",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0103",
"CSAFPID-0105",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-13465",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-13465"
}
]
},
{
"cve": "CVE-2025-14813",
"notes": [
{
"category": "description",
"text": "bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0004",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.80.2, 1.81.1, 1.84 or later.",
"product_ids": [
"CSAFPID-0004",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0004",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-14813",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-14813"
}
]
},
{
"cve": "CVE-2025-22870",
"notes": [
{
"category": "description",
"text": "golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.36.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-22870",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-22870"
}
]
},
{
"cve": "CVE-2025-22872",
"notes": [
{
"category": "description",
"text": "golang.org/x/net/html: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.38.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-22872",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-22872"
}
]
},
{
"cve": "CVE-2025-26791",
"notes": [
{
"category": "description",
"text": "dompurify: Mutation XSS in DOMPurify Due to Improper Template Literal Handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.2.4 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-26791",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-26791"
}
]
},
{
"cve": "CVE-2025-27789",
"notes": [
{
"category": "description",
"text": "Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0184",
"CSAFPID-0185",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 7.26.10, 8.0.0-alpha.17 or later.",
"product_ids": [
"CSAFPID-0184",
"CSAFPID-0185",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0184",
"CSAFPID-0185",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-27789",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-27789"
}
]
},
{
"cve": "CVE-2025-30359",
"notes": [
{
"category": "description",
"text": "webpack-dev-server: webpack-dev-server information exposure"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0186",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.2.1 or later.",
"product_ids": [
"CSAFPID-0186",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0186",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-30359",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-30359"
}
]
},
{
"cve": "CVE-2025-30360",
"notes": [
{
"category": "description",
"text": "webpack-dev-server: webpack-dev-server information exposure"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0186",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.2.1 or later.",
"product_ids": [
"CSAFPID-0186",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0186",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-30360",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-30360"
}
]
},
{
"cve": "CVE-2025-32873",
"notes": [
{
"category": "description",
"text": "An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. The django.utils.html.strip_tags() function is vulnerable to a potential denial-of-service (slow performance) when processing inputs containing large sequences of incomplete HTML tags. The template filter striptags is also vulnerable, because it is built on top of strip_tags()."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-32873",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-32873"
}
]
},
{
"cve": "CVE-2025-3931",
"notes": [
{
"category": "description",
"text": "yggdrasil: Local privilege escalation in yggdrasil"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0042",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0042",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-3931",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-3931"
}
]
},
{
"cve": "CVE-2025-45768",
"notes": [
{
"category": "description",
"text": "CVE-2025-45768 was reported by the analysis; the analyzer supplied no description."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "CVE-2025-45768",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-45768"
}
]
},
{
"cve": "CVE-2025-47273",
"notes": [
{
"category": "description",
"text": "setuptools: Path Traversal Vulnerability in setuptools PackageIndex"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0033",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0043",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 78.1.1 or later.",
"product_ids": [
"CSAFPID-0033",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0043",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0033",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0043",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-47273",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-47273"
}
]
},
{
"cve": "CVE-2025-47911",
"notes": [
{
"category": "description",
"text": "golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.45.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-47911",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-47911"
}
]
},
{
"cve": "CVE-2025-47913",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.43.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-47913",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-47913"
}
]
},
{
"cve": "CVE-2025-47914",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.45.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-47914",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-47914"
}
]
},
{
"cve": "CVE-2025-48379",
"notes": [
{
"category": "description",
"text": "Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without checking for available space. This only affects users who save untrusted data as a compressed DDS image. This issue has been patched in version 11.3.0."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-48379",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-48379"
}
]
},
{
"cve": "CVE-2025-48924",
"notes": [
{
"category": "description",
"text": "commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0187",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.18.0 or later.",
"product_ids": [
"CSAFPID-0187",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0187",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-48924",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-48924"
}
]
},
{
"cve": "CVE-2025-50181",
"notes": [
{
"category": "description",
"text": "urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0034",
"CSAFPID-0290",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.5.0 or later.",
"product_ids": [
"CSAFPID-0034",
"CSAFPID-0290",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0034",
"CSAFPID-0290",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-50181",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-50181"
}
]
},
{
"cve": "CVE-2025-50182",
"notes": [
{
"category": "description",
"text": "urllib3 does not control redirects in browsers and Node.js"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-50182",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-50182"
}
]
},
{
"cve": "CVE-2025-50537",
"notes": [
{
"category": "description",
"text": "Stack overflow vulnerability in eslint before 9.26.0 when serializing objects with circular references in eslint/lib/shared/serialization.js. The exploit is triggered via the RuleTester.run() method, which validates test cases and checks for duplicates. During validation, the internal function checkDuplicateTestCase() is called, which in turn uses the isSerializable() function for serialization checks. When a circular reference object is passed in, isSerializable() enters infinite recursion, ultimately causing a stack overflow."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 9.26.0 or later.",
"product_ids": [
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-50537",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-50537"
}
]
},
{
"cve": "CVE-2025-54313",
"notes": [
{
"category": "description",
"text": "eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "CVE-2025-54313",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-54313"
}
]
},
{
"cve": "CVE-2025-54798",
"notes": [
{
"category": "description",
"text": "tmp: tmp Symbolic Link Write Vulnerability"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0100",
"CSAFPID-0101",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.2.4 or later.",
"product_ids": [
"CSAFPID-0100",
"CSAFPID-0101",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0100",
"CSAFPID-0101",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-54798",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-54798"
}
]
},
{
"cve": "CVE-2025-55159",
"notes": [
{
"category": "description",
"text": "slab: Slab: Out-of-bounds Memory Access Vulnerability"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0188",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.4.11 or later.",
"product_ids": [
"CSAFPID-0188",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0188",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-55159",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-55159"
}
]
},
{
"cve": "CVE-2025-56200",
"notes": [
{
"category": "description",
"text": "validator.js has a URL validation bypass vulnerability in its isURL function"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0040",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 13.15.20 or later.",
"product_ids": [
"CSAFPID-0040",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0040",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-56200",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-56200"
}
]
},
{
"cve": "CVE-2025-57352",
"notes": [
{
"category": "description",
"text": "min-document: min-document prototype pollution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0262",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.19.1 or later.",
"product_ids": [
"CSAFPID-0262",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-57352",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-57352"
}
]
},
{
"cve": "CVE-2025-58056",
"notes": [
{
"category": "description",
"text": "netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.1.125.Final, 4.2.5.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-58056",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-58056"
}
]
},
{
"cve": "CVE-2025-58057",
"notes": [
{
"category": "description",
"text": "netty-codec: netty-codec-compression: Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0098",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.1.125.Final or later.",
"product_ids": [
"CSAFPID-0098",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0098",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-58057",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-58057"
}
]
},
{
"cve": "CVE-2025-58160",
"notes": [
{
"category": "description",
"text": "tracing-subscriber: Tracing log pollution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0263",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.3.20 or later.",
"product_ids": [
"CSAFPID-0263",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0263",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-58160",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-58160"
}
]
},
{
"cve": "CVE-2025-58181",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.45.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-58181",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-58181"
}
]
},
{
"cve": "CVE-2025-58190",
"notes": [
{
"category": "description",
"text": "golang.org/x/net/html: Infinite parsing loop in golang.org/x/net"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.45.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-58190",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-58190"
}
]
},
{
"cve": "CVE-2025-59288",
"notes": [
{
"category": "description",
"text": "playwright: Playwright Spoofing Vulnerability"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0045",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.55.1 or later.",
"product_ids": [
"CSAFPID-0045",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0045",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-59288",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-59288"
}
]
},
{
"cve": "CVE-2025-64718",
"notes": [
{
"category": "description",
"text": "js-yaml: js-yaml prototype pollution in merge"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0123",
"CSAFPID-0125",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.1.1, 3.14.2 or later.",
"product_ids": [
"CSAFPID-0123",
"CSAFPID-0125",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0123",
"CSAFPID-0125",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-64718",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-64718"
}
]
},
{
"cve": "CVE-2025-64756",
"notes": [
{
"category": "description",
"text": "glob: glob: Command Injection Vulnerability via Malicious Filenames"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0046",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 11.1.0, 10.5.0 or later.",
"product_ids": [
"CSAFPID-0046",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0046",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-64756",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-64756"
}
]
},
{
"cve": "CVE-2025-65945",
"notes": [
{
"category": "description",
"text": "node-jws: auth0/node-jws: Improper signature verification in HS256 algorithm"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0047",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.2.3, 4.0.1 or later.",
"product_ids": [
"CSAFPID-0047",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0047",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-65945",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-65945"
}
]
},
{
"cve": "CVE-2025-66030",
"notes": [
{
"category": "description",
"text": "node-forge: node-forge: Integer Overflow allows OID-based security bypass"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0041",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.3.2 or later.",
"product_ids": [
"CSAFPID-0041",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0041",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-66030",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-66030"
}
]
},
{
"cve": "CVE-2025-66031",
"notes": [
{
"category": "description",
"text": "node-forge: node-forge ASN.1 Unbounded Recursion"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0041",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.3.2 or later.",
"product_ids": [
"CSAFPID-0041",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0041",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-66031",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-66031"
}
]
},
{
"cve": "CVE-2025-66221",
"notes": [
{
"category": "description",
"text": "Werkzeug: Werkzeug: Denial of service via Windows device names in path segments"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0189",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.1.4 or later.",
"product_ids": [
"CSAFPID-0189",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0189",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-66221",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-66221"
}
]
},
{
"cve": "CVE-2025-66418",
"notes": [
{
"category": "description",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0034",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.6.0 or later.",
"product_ids": [
"CSAFPID-0034",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0034",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-66418",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-66418"
}
]
},
{
"cve": "CVE-2025-66471",
"notes": [
{
"category": "description",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0034",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.6.0 or later.",
"product_ids": [
"CSAFPID-0034",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0034",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-66471",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-66471"
}
]
},
{
"cve": "CVE-2025-67735",
"notes": [
{
"category": "description",
"text": "netty-codec-http: Netty (netty-codec-http): Request Smuggling via CRLF Injection"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.8.Final, 4.1.129.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-67735",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-67735"
}
]
},
{
"cve": "CVE-2025-68146",
"notes": [
{
"category": "description",
"text": "filelock: filelock: Time-of-Check-Time-of-Use (TOCTOU) race condition and symlink attack allows arbitrary file corruption or truncation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0190",
"CSAFPID-0191",
"CSAFPID-0192",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.20.1 or later.",
"product_ids": [
"CSAFPID-0190",
"CSAFPID-0191",
"CSAFPID-0192",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0190",
"CSAFPID-0191",
"CSAFPID-0192",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-68146",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-68146"
}
]
},
{
"cve": "CVE-2025-68157",
"notes": [
{
"category": "description",
"text": "webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0264",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.104.0 or later.",
"product_ids": [
"CSAFPID-0264",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0264",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-68157",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-68157"
}
]
},
{
"cve": "CVE-2025-68458",
"notes": [
{
"category": "description",
"text": "webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0264",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.104.1 or later.",
"product_ids": [
"CSAFPID-0264",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0264",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-68458",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-68458"
}
]
},
{
"cve": "CVE-2025-68470",
"notes": [
{
"category": "description",
"text": "react-router: React Router unexpected external redirect"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0193",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 6.30.2, 7.9.6 or later.",
"product_ids": [
"CSAFPID-0193",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0193",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-68470",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-68470"
}
]
},
{
"cve": "CVE-2025-68480",
"notes": [
{
"category": "description",
"text": "github.com/marshmallow-code/marshmallow: Marshmallow: Denial of Service via crafted request to Schema.load function"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0194",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.26.2, 4.1.2 or later.",
"product_ids": [
"CSAFPID-0194",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0194",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-68480",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-68480"
}
]
},
{
"cve": "CVE-2025-69534",
"notes": [
{
"category": "description",
"text": "CVE-2025-69534 was reported by the analysis; the analyzer supplied no description."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-69534",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-69534"
}
]
},
{
"cve": "CVE-2025-69725",
"notes": [
{
"category": "description",
"text": "Open redirect vulnerability in the RedirectSlashes middleware in github.com/go-chi/chi"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0296",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0296",
"CSAFPID-0331"
]
}
],
"title": "GO-2026-4316",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-69725"
}
]
},
{
"cve": "CVE-2025-69873",
"notes": [
{
"category": "description",
"text": "ajv: ReDoS via $data reference"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0195",
"CSAFPID-0196",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 8.18.0, 6.14.0 or later.",
"product_ids": [
"CSAFPID-0195",
"CSAFPID-0196",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0195",
"CSAFPID-0196",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-69873",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-69873"
}
]
},
{
"cve": "CVE-2025-71176",
"notes": [
{
"category": "description",
"text": "pytest: pytest: Denial of Service or Privilege Escalation via insecure temporary directory handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0197",
"CSAFPID-0198",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 9.0.3 or later.",
"product_ids": [
"CSAFPID-0197",
"CSAFPID-0198",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0197",
"CSAFPID-0198",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-71176",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-71176"
}
]
},
{
"cve": "CVE-2025-7339",
"notes": [
{
"category": "description",
"text": "on-headers: on-headers vulnerable to http response header manipulation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0265",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.1.0 or later.",
"product_ids": [
"CSAFPID-0265",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 3.4,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0265",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-7339",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-7339"
}
]
},
{
"cve": "CVE-2025-7962",
"notes": [
{
"category": "description",
"text": "com.sun.mail/jakarta.mail: Jakarta Mail SMTP Injection Vulnerability"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0199",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.6.8, 2.0.2 or later.",
"product_ids": [
"CSAFPID-0199",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0199",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-7962",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-7962"
}
]
},
{
"cve": "CVE-2025-7969",
"notes": [
{
"category": "description",
"text": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in markdown-it allows Cross-Site Scripting (XSS). This vulnerability is associated with program files lib/renderer.mjs.\n\nThis issue affects markdown-it: 14.1.0. NOTE: the Supplier does not consider this issue to be a vulnerability."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-7969",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-7969"
}
]
},
{
"cve": "CVE-2025-8869",
"notes": [
{
"category": "description",
"text": "pip: pip missing checks on symbolic link extraction"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 25.3 or later.",
"product_ids": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
}
],
"title": "CVE-2025-8869",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2025-8869"
}
]
},
{
"cve": "CVE-2026-0636",
"notes": [
{
"category": "description",
"text": "bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0004",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.84 or later.",
"product_ids": [
"CSAFPID-0004",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0004",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-0636",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-0636"
}
]
},
{
"cve": "CVE-2026-0871",
"notes": [
{
"category": "description",
"text": "org.keycloak/keycloak-services: Keycloak: Unauthorized modification of unmanaged user attributes by administrators"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0077",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 26.5.2 or later.",
"product_ids": [
"CSAFPID-0077",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0077",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-0871",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-0871"
}
]
},
{
"cve": "CVE-2026-0980",
"notes": [
{
"category": "description",
"text": "rubyipmi is vulnerable to OS Command Injection through malicious usernames"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0292",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0292",
"CSAFPID-0331"
]
}
],
"title": "GHSA-hfcp-477w-3wjw",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-0980"
}
]
},
{
"cve": "CVE-2026-101898",
"notes": [
{
"category": "description",
"text": "axios: axios: Security control bypass via unapplied HTTP/2 proxy and DNS settings"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0048",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.20.0 or later.",
"product_ids": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101898",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101898"
}
]
},
{
"cve": "CVE-2026-101899",
"notes": [
{
"category": "description",
"text": "axios: Axios: Information disclosure via improper CIDR proxy bypass handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0048",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.20.0 or later.",
"product_ids": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101899",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101899"
}
]
},
{
"cve": "CVE-2026-101900",
"notes": [
{
"category": "description",
"text": "axios: Axios: Outbound HTTP header injection via prototype pollution in fetch adapter"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0048",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.20.0 or later.",
"product_ids": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101900",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101900"
}
]
},
{
"cve": "CVE-2026-101901",
"notes": [
{
"category": "description",
"text": "axios: Axios: Denial of Service via unhandled error in HTTP/2 session initialization"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0048",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.20.0 or later.",
"product_ids": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101901",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101901"
}
]
},
{
"cve": "CVE-2026-101902",
"notes": [
{
"category": "description",
"text": "axios: axios: Unintended HTTP method override via prototype pollution gadget"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0048",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.34.0, 1.20.0 or later.",
"product_ids": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101902",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101902"
}
]
},
{
"cve": "CVE-2026-101903",
"notes": [
{
"category": "description",
"text": "axios: Axios: Denial of Service via malformed data URLs"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0048",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.20.0 or later.",
"product_ids": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101903",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101903"
}
]
},
{
"cve": "CVE-2026-101904",
"notes": [
{
"category": "description",
"text": "axios: Axios: HTTP header injection via inherited prototype properties"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0048",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.20.0 or later.",
"product_ids": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101904",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101904"
}
]
},
{
"cve": "CVE-2026-101905",
"notes": [
{
"category": "description",
"text": "axios: axios: Request socket hijacking via inherited createConnection property"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0048",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.20.0 or later.",
"product_ids": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101905",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101905"
}
]
},
{
"cve": "CVE-2026-101906",
"notes": [
{
"category": "description",
"text": "axios: axios: Denial of Service via crafted redirect hostname"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0048",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.20.0 or later.",
"product_ids": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101906",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101906"
}
]
},
{
"cve": "CVE-2026-101907",
"notes": [
{
"category": "description",
"text": "axios: Axios: Server-Side Request Forgery via bypassed redirect restrictions in fetch adapter"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0048",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.20.0 or later.",
"product_ids": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101907",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101907"
}
]
},
{
"cve": "CVE-2026-101908",
"notes": [
{
"category": "description",
"text": "axios: Axios: Outbound HTTP request manipulation via fetch adapter prototype pollution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0048",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.20.0 or later.",
"product_ids": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101908",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101908"
}
]
},
{
"cve": "CVE-2026-101909",
"notes": [
{
"category": "description",
"text": "axios: axios: Denial of Service via prototype pollution gadget in form serialization"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0048",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.34.0, 1.20.0 or later.",
"product_ids": [
"CSAFPID-0048",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101909",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101909"
}
]
},
{
"cve": "CVE-2026-101910",
"notes": [
{
"category": "description",
"text": "ip-address: ip-address: Security boundary bypass via unclassified NAT64 local-use address range"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0202",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 10.5.1 or later.",
"product_ids": [
"CSAFPID-0202",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101910",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101910"
}
]
},
{
"cve": "CVE-2026-101911",
"notes": [
{
"category": "description",
"text": "ip-address: ip-address: Denial of Service via unbounded IPv6 address parsing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0202",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 10.7.1 or later.",
"product_ids": [
"CSAFPID-0202",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0202",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101911",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101911"
}
]
},
{
"cve": "CVE-2026-101912",
"notes": [
{
"category": "description",
"text": "ip-address: ip-address: Access control bypass via cross-family subnet comparison"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0202",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 10.7.1 or later.",
"product_ids": [
"CSAFPID-0202",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0202",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101912",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101912"
}
]
},
{
"cve": "CVE-2026-101913",
"notes": [
{
"category": "description",
"text": "ip-address: ip-address: Security bypass via incomplete IPv6 link-local address validation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0202",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 10.5.1 or later.",
"product_ids": [
"CSAFPID-0202",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0202",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101913",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101913"
}
]
},
{
"cve": "CVE-2026-101917",
"notes": [
{
"category": "description",
"text": "pyjwt: PyJWT: Denial of Service via outbound request amplification on unknown key identifiers"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.14.0 or later.",
"product_ids": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101917",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101917"
}
]
},
{
"cve": "CVE-2026-101918",
"notes": [
{
"category": "description",
"text": "pyjwt: PyJWT: Denial of Service via deeply nested JSON token payload"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.15.0 or later.",
"product_ids": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-101918",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-101918"
}
]
},
{
"cve": "CVE-2026-102265",
"notes": [
{
"category": "description",
"text": "pyjwt: pyjwt: Denial of Service via deeply nested token headers"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0006",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.14.0 or later.",
"product_ids": [
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102265",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102265"
}
]
},
{
"cve": "CVE-2026-102266",
"notes": [
{
"category": "description",
"text": "pyjwt: pyjwt: Authentication bypass via empty HMAC key acceptance"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0006",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.14.0 or later.",
"product_ids": [
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102266",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102266"
}
]
},
{
"cve": "CVE-2026-102267",
"notes": [
{
"category": "description",
"text": "pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.14.0 or later.",
"product_ids": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102267",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102267"
}
]
},
{
"cve": "CVE-2026-102268",
"notes": [
{
"category": "description",
"text": "pyjwt: PyJWT: Authentication bypass via improper public key validation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.14.0 or later.",
"product_ids": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102268",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102268"
}
]
},
{
"cve": "CVE-2026-102269",
"notes": [
{
"category": "description",
"text": "pyjwt: PyJWT: Token revocation bypass via non-canonical signature decoding"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.14.0 or later.",
"product_ids": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102269",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102269"
}
]
},
{
"cve": "CVE-2026-102270",
"notes": [
{
"category": "description",
"text": "pyjwt: pyjwt: Denial of Service via regular expression backtracking in is_pem_format"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.14.0 or later.",
"product_ids": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102270",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102270"
}
]
},
{
"cve": "CVE-2026-102271",
"notes": [
{
"category": "description",
"text": "pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.14.0 or later.",
"product_ids": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102271",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102271"
}
]
},
{
"cve": "CVE-2026-102272",
"notes": [
{
"category": "description",
"text": "pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0006",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.14.0 or later.",
"product_ids": [
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102272",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102272"
}
]
},
{
"cve": "CVE-2026-102273",
"notes": [
{
"category": "description",
"text": "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0006",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.14.0 or later.",
"product_ids": [
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102273",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102273"
}
]
},
{
"cve": "CVE-2026-102274",
"notes": [
{
"category": "description",
"text": "pyjwt: pyjwt: Denial of Service via malformed RSA key in JWK set"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.14.0 or later.",
"product_ids": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102274",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102274"
}
]
},
{
"cve": "CVE-2026-102275",
"notes": [
{
"category": "description",
"text": "pyjwt: PyJWT: Token verification bypass via mismatched OKP key components"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.15.0 or later.",
"product_ids": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102275",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102275"
}
]
},
{
"cve": "CVE-2026-102276",
"notes": [
{
"category": "description",
"text": "brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0051",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.0.10, 3.0.7, 2.1.5, 1.1.19 or later.",
"product_ids": [
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0051",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0051",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102276",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102276"
}
]
},
{
"cve": "CVE-2026-102277",
"notes": [
{
"category": "description",
"text": "brace-expansion: brace-expansion: Denial of Service via crafted brace patterns"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0051",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.0.12, 3.0.9, 2.1.7, 1.1.21 or later.",
"product_ids": [
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0051",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0051",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102277",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102277"
}
]
},
{
"cve": "CVE-2026-102278",
"notes": [
{
"category": "description",
"text": "brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0051",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.0.11, 3.0.8, 2.1.6, 1.1.20 or later.",
"product_ids": [
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0051",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0051",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102278",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102278"
}
]
},
{
"cve": "CVE-2026-102342",
"notes": [
{
"category": "description",
"text": "XSS in ammonia via SVG `animate` and `set` animation tags"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0285",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.1.4 or later.",
"product_ids": [
"CSAFPID-0285",
"CSAFPID-0331"
]
}
],
"title": "RUSTSEC-2026-0213",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102342"
}
]
},
{
"cve": "CVE-2026-102422",
"notes": [
{
"category": "description",
"text": "shell-quote: shell-quote: Arbitrary command execution via improper line terminator handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.11.0 or later.",
"product_ids": [
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102422",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102422"
}
]
},
{
"cve": "CVE-2026-102598",
"notes": [
{
"category": "description",
"text": "werkzeug: werkzeug: Denial of Service via safe_join() Windows special device paths"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0189",
"CSAFPID-0203",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.1.9 or later.",
"product_ids": [
"CSAFPID-0189",
"CSAFPID-0203",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0189",
"CSAFPID-0203",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102598",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102598"
}
]
},
{
"cve": "CVE-2026-102925",
"notes": [
{
"category": "description",
"text": "virtualenv: virtualenv: Arbitrary code execution via crafted paths in activation scripts"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 21.7.13 or later.",
"product_ids": [
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102925",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102925"
}
]
},
{
"cve": "CVE-2026-102930",
"notes": [
{
"category": "description",
"text": "virtualenv: virtualenv: Arbitrary code execution via unverified downloaded seed wheels"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 21.7.12 or later.",
"product_ids": [
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102930",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102930"
}
]
},
{
"cve": "CVE-2026-102937",
"notes": [
{
"category": "description",
"text": "virtualenv: virtualenv: Arbitrary code execution via unescaped prompt in Windows activation script"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 21.7.12 or later.",
"product_ids": [
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102937",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102937"
}
]
},
{
"cve": "CVE-2026-102938",
"notes": [
{
"category": "description",
"text": "virtualenv: virtualenv: Arbitrary code execution via configuration injection in prompt values"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 21.7.11 or later.",
"product_ids": [
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102938",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102938"
}
]
},
{
"cve": "CVE-2026-102991",
"notes": [
{
"category": "description",
"text": "Mako: Path traversal via drive-letter URI on Windows in TemplateLookup"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0093",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.4.2 or later.",
"product_ids": [
"CSAFPID-0093",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0093",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-102991",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-102991"
}
]
},
{
"cve": "CVE-2026-103001",
"notes": [
{
"category": "description",
"text": "pyjwt: pyjwt: Token validation bypass via options dictionary mutation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-103001",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-103001"
}
]
},
{
"cve": "CVE-2026-104844",
"notes": [
{
"category": "description",
"text": "postcss-selector-parser: postcss-selector-parser: Denial of Service via crafted CSS selectors"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0204",
"CSAFPID-0205",
"CSAFPID-0206",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 7.1.6 or later.",
"product_ids": [
"CSAFPID-0204",
"CSAFPID-0205",
"CSAFPID-0206",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0204",
"CSAFPID-0205",
"CSAFPID-0206",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-104844",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-104844"
}
]
},
{
"cve": "CVE-2026-104850",
"notes": [
{
"category": "description",
"text": "@modelcontextprotocol/sdk: @modelcontextprotocol/client: MCP TypeScript SDK: Information disclosure via unbound OAuth credentials"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0058",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.31.0 or later.",
"product_ids": [
"CSAFPID-0058",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0058",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-104850",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-104850"
}
]
},
{
"cve": "CVE-2026-104851",
"notes": [
{
"category": "description",
"text": "fsspec: fsspec: arbitrary code execution via unrestricted template rendering in ReferenceFileSystem"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0059",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2026.6.0 or later.",
"product_ids": [
"CSAFPID-0059",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0059",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-104851",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-104851"
}
]
},
{
"cve": "CVE-2026-104874",
"notes": [
{
"category": "description",
"text": "multidict: multidict: Denial of Service via memory leak in items-view operations"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0207",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 6.9.1 or later.",
"product_ids": [
"CSAFPID-0207",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0207",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-104874",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-104874"
}
]
},
{
"cve": "CVE-2026-10532",
"notes": [
{
"category": "description",
"text": "Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0183",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.5.34 or later.",
"product_ids": [
"CSAFPID-0183",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0183",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-10532",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-10532"
}
]
},
{
"cve": "CVE-2026-106444",
"notes": [
{
"category": "description",
"text": "handlebars: Handlebars: Cross-Site Scripting via unescaped closing script tags in precompiled templates"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0009",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.7.10 or later.",
"product_ids": [
"CSAFPID-0009",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0009",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-106444",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-106444"
}
]
},
{
"cve": "CVE-2026-106445",
"notes": [
{
"category": "description",
"text": "handlebars: Handlebars: JavaScript Injection via Own Property Check Bypass"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0009",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.7.10 or later.",
"product_ids": [
"CSAFPID-0009",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0009",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-106445",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-106445"
}
]
},
{
"cve": "CVE-2026-106446",
"notes": [
{
"category": "description",
"text": "handlebars: Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams)"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0009",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.7.10 or later.",
"product_ids": [
"CSAFPID-0009",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0009",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-106446",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-106446"
}
]
},
{
"cve": "CVE-2026-109345",
"notes": [
{
"category": "description",
"text": "DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.4.16 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "GHSA-6688-9rhm-gjv2"
},
{
"cve": "CVE-2026-111063",
"notes": [
{
"category": "description",
"text": "aiohttp: aiohttp: Information disclosure via unenforced Secure attribute on shared cookies"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111063"
},
{
"cve": "CVE-2026-111064",
"notes": [
{
"category": "description",
"text": "aiohttp: aiohttp: Denial of Service via missing initial request timeout"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111064"
},
{
"cve": "CVE-2026-111065",
"notes": [
{
"category": "description",
"text": "aiohttp: aiohttp: Denial of Service via Max-Age processing overflow"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111065"
},
{
"cve": "CVE-2026-111066",
"notes": [
{
"category": "description",
"text": "aiohttp: aiohttp: Denial of Service via file descriptor exhaustion in multipart request processing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111066"
},
{
"cve": "CVE-2026-111748",
"notes": [
{
"category": "description",
"text": "aiohttp: aiohttp: Security control bypass via request scheme spoofing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111748"
},
{
"cve": "CVE-2026-111749",
"notes": [
{
"category": "description",
"text": "aiohttp: aiohttp: Host-Only cookie protection bypass via untrusted subdomain"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111749"
},
{
"cve": "CVE-2026-111750",
"notes": [
{
"category": "description",
"text": "aiohttp: aiohttp: HTTP request smuggling via ambiguous request framing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111750"
},
{
"cve": "CVE-2026-111755",
"notes": [
{
"category": "description",
"text": "follow-redirects: follow-redirects: Information disclosure via improper regular expression escaping in sensitive header filtering"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0062",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.16.1 or later.",
"product_ids": [
"CSAFPID-0062",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111755"
},
{
"cve": "CVE-2026-111756",
"notes": [
{
"category": "description",
"text": "follow-redirects: follow-redirects: Information disclosure via array-formatted headers during cross-origin redirects"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0062",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.16.1 or later.",
"product_ids": [
"CSAFPID-0062",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111756"
},
{
"cve": "CVE-2026-111758",
"notes": [
{
"category": "description",
"text": "markdown-it: markdown-it: Denial of Service via unclosed link reference definitions"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0063",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 14.3.3, 15.0.3 or later.",
"product_ids": [
"CSAFPID-0063",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0063",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111758"
},
{
"cve": "CVE-2026-111759",
"notes": [
{
"category": "description",
"text": "markdown-it: markdown-it: Denial of Service via mismatched quote parsing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0063",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 15.0.2, 14.3.2 or later.",
"product_ids": [
"CSAFPID-0063",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0063",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111759"
},
{
"cve": "CVE-2026-111766",
"notes": [
{
"category": "description",
"text": "markdown-it: markdown-it: Denial of Service via repeated unterminated inline HTML constructs"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0063",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 14.3.3, 15.0.3 or later.",
"product_ids": [
"CSAFPID-0063",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0063",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111766"
},
{
"cve": "CVE-2026-111767",
"notes": [
{
"category": "description",
"text": "MCP TypeScript SDK: Experimental tasks were not tied to the session that created them"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0058",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.32.0 or later.",
"product_ids": [
"CSAFPID-0058",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0058",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111767"
},
{
"cve": "CVE-2026-111768",
"notes": [
{
"category": "description",
"text": "MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0058",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.32.0 or later.",
"product_ids": [
"CSAFPID-0058",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0058",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111768"
},
{
"cve": "CVE-2026-111769",
"notes": [
{
"category": "description",
"text": "MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0058",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.32.0 or later.",
"product_ids": [
"CSAFPID-0058",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0058",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111769"
},
{
"cve": "CVE-2026-111771",
"notes": [
{
"category": "description",
"text": "MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0058",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.32.0 or later.",
"product_ids": [
"CSAFPID-0058",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0058",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111771"
},
{
"cve": "CVE-2026-111943",
"notes": [
{
"category": "description",
"text": "golang: crypto/x509: Go: crypto/x509: mitigation for security concerns with a specific Certificate Authority"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0327",
"CSAFPID-0328",
"CSAFPID-0165",
"CSAFPID-0329",
"CSAFPID-0166",
"CSAFPID-0167",
"CSAFPID-0330",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.26.10, 1.27.3 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0327",
"CSAFPID-0328",
"CSAFPID-0165",
"CSAFPID-0329",
"CSAFPID-0166",
"CSAFPID-0167",
"CSAFPID-0330",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0327",
"CSAFPID-0328",
"CSAFPID-0165",
"CSAFPID-0329",
"CSAFPID-0166",
"CSAFPID-0167",
"CSAFPID-0330",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-111943"
},
{
"cve": "CVE-2026-112395",
"notes": [
{
"category": "description",
"text": "pillow: pillow: Information disclosure via crafted tiled TIFF image"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 13.0.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-112395"
},
{
"cve": "CVE-2026-112397",
"notes": [
{
"category": "description",
"text": "pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 13.0.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-112397",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-112397"
}
]
},
{
"cve": "CVE-2026-112400",
"notes": [
{
"category": "description",
"text": "pillow: pillow: Denial of Service via memory exhaustion from crafted GIF image"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 13.0.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-112400"
},
{
"cve": "CVE-2026-112403",
"notes": [
{
"category": "description",
"text": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG dec ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 13.0.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-112403",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-112403"
}
]
},
{
"cve": "CVE-2026-112404",
"notes": [
{
"category": "description",
"text": "pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 13.0.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-112404"
},
{
"cve": "CVE-2026-112895",
"notes": [
{
"category": "description",
"text": "pillow: pillow: Denial of service via crafted PDF during append operations"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 13.0.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-112895",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-112895"
}
]
},
{
"cve": "CVE-2026-112896",
"notes": [
{
"category": "description",
"text": "pillow: Pillow: Denial of Service via out-of-bounds read in TIFF encoder"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 13.0.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-112896",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-112896"
}
]
},
{
"cve": "CVE-2026-112897",
"notes": [
{
"category": "description",
"text": "pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 13.0.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-112897",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-112897"
}
]
},
{
"cve": "CVE-2026-112899",
"notes": [
{
"category": "description",
"text": "Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 13.0.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-112899",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-112899"
}
]
},
{
"cve": "CVE-2026-112942",
"notes": [
{
"category": "description",
"text": "launch-editor: launch-editor: Command injection via improper file path validation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0066",
"CSAFPID-0067",
"CSAFPID-0068",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.14.2 or later.",
"product_ids": [
"CSAFPID-0066",
"CSAFPID-0067",
"CSAFPID-0068",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-112942"
},
{
"cve": "CVE-2026-112943",
"notes": [
{
"category": "description",
"text": "launch-editor: launch-editor: Arbitrary code execution via improper argument escaping on Windows"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0066",
"CSAFPID-0067",
"CSAFPID-0068",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.14.2 or later.",
"product_ids": [
"CSAFPID-0066",
"CSAFPID-0067",
"CSAFPID-0068",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-112943"
},
{
"cve": "CVE-2026-112944",
"notes": [
{
"category": "description",
"text": "launch-editor: launch-editor: Arbitrary command execution via improper filename handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0066",
"CSAFPID-0067",
"CSAFPID-0068",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.14.2 or later.",
"product_ids": [
"CSAFPID-0066",
"CSAFPID-0067",
"CSAFPID-0068",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-112944"
},
{
"cve": "CVE-2026-113654",
"notes": [
{
"category": "description",
"text": "sanitize-html: sanitize-html: HTML sanitization bypass via improper noscript tag handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0208",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.18.0 or later.",
"product_ids": [
"CSAFPID-0208",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-113654"
},
{
"cve": "CVE-2026-113661",
"notes": [
{
"category": "description",
"text": "sanitize-html: sanitize-html: Cross-site scripting via unsafe meta refresh content attributes"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0208",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.18.0 or later.",
"product_ids": [
"CSAFPID-0208",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0208",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-113661"
},
{
"cve": "CVE-2026-1180",
"notes": [
{
"category": "description",
"text": "org.keycloak.protocol.oidc: Blind Server-Side Request Forgery (SSRF) in Keycloak OIDC Dynamic Client Registration via jwks_uri"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0209",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0209",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-1180",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-1180"
}
]
},
{
"cve": "CVE-2026-12143",
"notes": [
{
"category": "description",
"text": "form-data: form-data: Form field override via CRLF injection"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0069",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.5.6, 3.0.5, 4.0.6 or later.",
"product_ids": [
"CSAFPID-0069",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0069",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-12143",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-12143"
}
]
},
{
"cve": "CVE-2026-1225",
"notes": [
{
"category": "description",
"text": "ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0183",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.5.25 or later.",
"product_ids": [
"CSAFPID-0183",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0183",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-1225",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-1225"
}
]
},
{
"cve": "CVE-2026-12515",
"notes": [
{
"category": "description",
"text": "katello: missing repository authorization in content_uploads exposes cross-product content existence"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0210",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to >= 4.21.0.rc1 or later.",
"product_ids": [
"CSAFPID-0210",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0210",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-12515",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-12515"
}
]
},
{
"cve": "CVE-2026-12590",
"notes": [
{
"category": "description",
"text": "body-parser: body-parser: Denial of Service via invalid limit option"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0266",
"CSAFPID-0267",
"CSAFPID-0268",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.20.6, 2.3.0 or later.",
"product_ids": [
"CSAFPID-0266",
"CSAFPID-0267",
"CSAFPID-0268",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0266",
"CSAFPID-0267",
"CSAFPID-0268",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-12590",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-12590"
}
]
},
{
"cve": "CVE-2026-13311",
"notes": [
{
"category": "description",
"text": "shell-quote: shell-quote/parse: shell-quote: Denial of Service due to inefficient input parsing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0008",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.9.0 or later.",
"product_ids": [
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0008",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0008",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-13311",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-13311"
}
]
},
{
"cve": "CVE-2026-13346",
"notes": [
{
"category": "description",
"text": "pip: pip: Arbitrary file installation via malicious package indexes"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 26.2.0 or later.",
"product_ids": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-13346",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-13346"
}
]
},
{
"cve": "CVE-2026-13506",
"notes": [
{
"category": "description",
"text": "bouncycastle: Bouncy Castle for Java: Denial of Service via lazy ASN.1 sequence processing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0004",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.85 or later.",
"product_ids": [
"CSAFPID-0004",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0004",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-13506",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-13506"
}
]
},
{
"cve": "CVE-2026-14257",
"notes": [
{
"category": "description",
"text": "brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0052",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.0.8, 3.0.3, 2.1.3, 1.1.17 or later.",
"product_ids": [
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0052",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0052",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-14257",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-14257"
}
]
},
{
"cve": "CVE-2026-14620",
"notes": [
{
"category": "description",
"text": "webpack-dev-server: webpack-dev-server: Arbitrary file opening and denial of service via exposed developer endpoints"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0186",
"CSAFPID-0211",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.2.6 or later.",
"product_ids": [
"CSAFPID-0186",
"CSAFPID-0211",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0186",
"CSAFPID-0211",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-14620",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-14620"
}
]
},
{
"cve": "CVE-2026-14631",
"notes": [
{
"category": "description",
"text": "webpack-dev-server: webpack-dev-server: Denial of Service via malformed headers"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0186",
"CSAFPID-0211",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.2.6 or later.",
"product_ids": [
"CSAFPID-0186",
"CSAFPID-0211",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0186",
"CSAFPID-0211",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-14631",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-14631"
}
]
},
{
"cve": "CVE-2026-15307",
"notes": [
{
"category": "description",
"text": "django: Django: Remote code execution via GeoDjango spatial lookups"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.2.17, 6.0.8 or later.",
"product_ids": [
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-15307",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-15307"
}
]
},
{
"cve": "CVE-2026-15830",
"notes": [
{
"category": "description",
"text": "django: Django: Denial of Service via parsing deeply nested geometry collections"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.2.17, 6.0.8, 6.1.1 or later.",
"product_ids": [
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-15830",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-15830"
}
]
},
{
"cve": "CVE-2026-1703",
"notes": [
{
"category": "description",
"text": "pip: pip: Information disclosure via path traversal when installing crafted wheel archives"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 26.0 or later.",
"product_ids": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-1703",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-1703"
}
]
},
{
"cve": "CVE-2026-17495",
"notes": [
{
"category": "description",
"text": "moment: Moment: Path Traversal via crafted non-string input to locale function"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0212",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.31.0 or later.",
"product_ids": [
"CSAFPID-0212",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0212",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-17495",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-17495"
}
]
},
{
"cve": "CVE-2026-18401",
"notes": [
{
"category": "description",
"text": "tools.jackson.core/jackson-core: com.fasterxml.jackson.core/jackson-core: jackson-core: Denial of Service due to number length bypass in asynchronous JSON parser"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0128",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.21.1, 2.18.6 or later.",
"product_ids": [
"CSAFPID-0128",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0128",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-18401",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-18401"
}
]
},
{
"cve": "CVE-2026-19032",
"notes": [
{
"category": "description",
"text": "com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: Jackson-databind: Uncontrolled URI scheme resolution in Path deserialization"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0116",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.18.10, 2.21.6, 2.22.2 or later.",
"product_ids": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-19032",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-19032"
}
]
},
{
"cve": "CVE-2026-19693",
"notes": [
{
"category": "description",
"text": "extract-zip: extract-zip: Arbitrary file write via symlink in archive"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0072",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0072",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-19693",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-19693"
}
]
},
{
"cve": "CVE-2026-21441",
"notes": [
{
"category": "description",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0034",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.6.3 or later.",
"product_ids": [
"CSAFPID-0034",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0034",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-21441",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-21441"
}
]
},
{
"cve": "CVE-2026-21860",
"notes": [
{
"category": "description",
"text": "Werkzeug safe_join() allows Windows special device names with compound extensions"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0189",
"CSAFPID-0203",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.1.5 or later.",
"product_ids": [
"CSAFPID-0189",
"CSAFPID-0203",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0189",
"CSAFPID-0203",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-21860",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-21860"
}
]
},
{
"cve": "CVE-2026-22029",
"notes": [
{
"category": "description",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0073",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.23.2 or later.",
"product_ids": [
"CSAFPID-0073",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0073",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-22029",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-22029"
}
]
},
{
"cve": "CVE-2026-22701",
"notes": [
{
"category": "description",
"text": "filelock: filelock Time-of-Check-Time-of-Use (TOCTOU) in SoftFileLock"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0190",
"CSAFPID-0191",
"CSAFPID-0192",
"CSAFPID-0213",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.20.3 or later.",
"product_ids": [
"CSAFPID-0190",
"CSAFPID-0191",
"CSAFPID-0192",
"CSAFPID-0213",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0190",
"CSAFPID-0191",
"CSAFPID-0192",
"CSAFPID-0213",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-22701",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-22701"
}
]
},
{
"cve": "CVE-2026-22702",
"notes": [
{
"category": "description",
"text": "virtualenv: virtualenv: Local attacker can redirect file operations via TOCTOU race condition"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 20.36.1 or later.",
"product_ids": [
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-22702",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-22702"
}
]
},
{
"cve": "CVE-2026-22815",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: Denial of Service via insufficient header/trailer handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.13.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-22815",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-22815"
}
]
},
{
"cve": "CVE-2026-2327",
"notes": [
{
"category": "description",
"text": "markdown-it: markdown-it: Denial of Service via Regular Expression Denial of Service in linkify function"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0063",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 14.1.1 or later.",
"product_ids": [
"CSAFPID-0063",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0063",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-2327",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-2327"
}
]
},
{
"cve": "CVE-2026-2391",
"notes": [
{
"category": "description",
"text": "qs: qs's arrayLimit bypass in comma parsing allows denial of service"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0248",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 6.14.2 or later.",
"product_ids": [
"CSAFPID-0248",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0248",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-2391",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-2391"
}
]
},
{
"cve": "CVE-2026-23949",
"notes": [
{
"category": "description",
"text": "jaraco.context Has a Path Traversal Vulnerability"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0291",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 6.1.0 or later.",
"product_ids": [
"CSAFPID-0291",
"CSAFPID-0331"
]
}
],
"title": "GHSA-58pv-8j8x-9vj2",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-23949"
}
]
},
{
"cve": "CVE-2026-24001",
"notes": [
{
"category": "description",
"text": "jsdiff: denial of service vulnerability in parsePatch and applyPatch"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0269",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 8.0.3, 5.2.2, 4.0.4, 3.5.1 or later.",
"product_ids": [
"CSAFPID-0269",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0269",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-24001",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-24001"
}
]
},
{
"cve": "CVE-2026-24049",
"notes": [
{
"category": "description",
"text": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0074",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.46.2 or later.",
"product_ids": [
"CSAFPID-0074",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0074",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-24049",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-24049"
}
]
},
{
"cve": "CVE-2026-25536",
"notes": [
{
"category": "description",
"text": "@modelcontextprotocol/sdk: @modelcontextprotocol/sdk cross-client data leak"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0058",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.26.0 or later.",
"product_ids": [
"CSAFPID-0058",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0058",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-25536",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-25536"
}
]
},
{
"cve": "CVE-2026-25541",
"notes": [
{
"category": "description",
"text": "Bytes is a utility library for working with bytes. From version 1.2.1 ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0214",
"CSAFPID-0215",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.11.1 or later.",
"product_ids": [
"CSAFPID-0214",
"CSAFPID-0215",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0214",
"CSAFPID-0215",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-25541",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-25541"
}
]
},
{
"cve": "CVE-2026-25645",
"notes": [
{
"category": "description",
"text": "requests: Requests: Security bypass due to predictable temporary file creation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0173",
"CSAFPID-0216",
"CSAFPID-0217",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.33.0 or later.",
"product_ids": [
"CSAFPID-0173",
"CSAFPID-0216",
"CSAFPID-0217",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0173",
"CSAFPID-0216",
"CSAFPID-0217",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-25645",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-25645"
}
]
},
{
"cve": "CVE-2026-25679",
"notes": [
{
"category": "description",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.8, 1.26.1 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-25679",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-25679"
}
]
},
{
"cve": "CVE-2026-25680",
"notes": [
{
"category": "description",
"text": "golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.55.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-25680",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-25680"
}
]
},
{
"cve": "CVE-2026-25681",
"notes": [
{
"category": "description",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.55.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-25681",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-25681"
}
]
},
{
"cve": "CVE-2026-25727",
"notes": [
{
"category": "description",
"text": "time: time affected by a stack exhaustion denial of service attack"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0218",
"CSAFPID-0219",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.3.47 or later.",
"product_ids": [
"CSAFPID-0218",
"CSAFPID-0219",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0218",
"CSAFPID-0219",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-25727",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-25727"
}
]
},
{
"cve": "CVE-2026-26007",
"notes": [
{
"category": "description",
"text": "cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0076",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 46.0.5 or later.",
"product_ids": [
"CSAFPID-0076",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0076",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-26007",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-26007"
}
]
},
{
"cve": "CVE-2026-2603",
"notes": [
{
"category": "description",
"text": "keycloak: Keycloak: Unauthorized authentication via disabled SAML Identity Provider"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0077",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 26.5.5 or later.",
"product_ids": [
"CSAFPID-0077",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0077",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-2603",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-2603"
}
]
},
{
"cve": "CVE-2026-26996",
"notes": [
{
"category": "description",
"text": "minimatch: minimatch: Denial of Service via specially crafted glob patterns"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0078",
"CSAFPID-0079",
"CSAFPID-0080",
"CSAFPID-0081",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 10.2.1, 9.0.6, 8.0.5, 7.4.7, 6.2.1, 5.1.7, 4.2.4, 3.1.3 or later.",
"product_ids": [
"CSAFPID-0078",
"CSAFPID-0079",
"CSAFPID-0080",
"CSAFPID-0081",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0078",
"CSAFPID-0079",
"CSAFPID-0080",
"CSAFPID-0081",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-26996",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-26996"
}
]
},
{
"cve": "CVE-2026-27136",
"notes": [
{
"category": "description",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.55.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-27136",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-27136"
}
]
},
{
"cve": "CVE-2026-27139",
"notes": [
{
"category": "description",
"text": "os: FileInfo can escape from a Root in golang os module"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.8, 1.26.1 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 2.5,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-27139",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-27139"
}
]
},
{
"cve": "CVE-2026-27142",
"notes": [
{
"category": "description",
"text": "html/template: URLs in meta content attribute actions are not escaped in html/template"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.8, 1.26.1 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-27142",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-27142"
}
]
},
{
"cve": "CVE-2026-27145",
"notes": [
{
"category": "description",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.11, 1.26.4 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-27145",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-27145"
}
]
},
{
"cve": "CVE-2026-27199",
"notes": [
{
"category": "description",
"text": "Werkzeug safe_join() allows Windows special device names"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0189",
"CSAFPID-0203",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.1.6 or later.",
"product_ids": [
"CSAFPID-0189",
"CSAFPID-0203",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0189",
"CSAFPID-0203",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-27199",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-27199"
}
]
},
{
"cve": "CVE-2026-27205",
"notes": [
{
"category": "description",
"text": "flask: Flask: Information disclosure via improper caching of session data"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0270",
"CSAFPID-0271",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.1.3 or later.",
"product_ids": [
"CSAFPID-0270",
"CSAFPID-0271",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0270",
"CSAFPID-0271",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-27205",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-27205"
}
]
},
{
"cve": "CVE-2026-27446",
"notes": [
{
"category": "description",
"text": "org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0011",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0011",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-27446",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-27446"
}
]
},
{
"cve": "CVE-2026-27448",
"notes": [
{
"category": "description",
"text": "pyOpenSSL: TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0082",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 26.0.0 or later.",
"product_ids": [
"CSAFPID-0082",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0082",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-27448",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-27448"
}
]
},
{
"cve": "CVE-2026-27459",
"notes": [
{
"category": "description",
"text": "pyOpenSSL: DTLS cookie callback buffer overflow"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0082",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 26.0.0 or later.",
"product_ids": [
"CSAFPID-0082",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0082",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-27459",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-27459"
}
]
},
{
"cve": "CVE-2026-27601",
"notes": [
{
"category": "description",
"text": "Underscore.js: Underscore.js: Denial of Service via recursive data structures in flatten and isEqual functions"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0083",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.13.8 or later.",
"product_ids": [
"CSAFPID-0083",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0083",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-27601",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-27601"
}
]
},
{
"cve": "CVE-2026-27903",
"notes": [
{
"category": "description",
"text": "minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0078",
"CSAFPID-0079",
"CSAFPID-0080",
"CSAFPID-0081",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.3 or later.",
"product_ids": [
"CSAFPID-0078",
"CSAFPID-0079",
"CSAFPID-0080",
"CSAFPID-0081",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0078",
"CSAFPID-0079",
"CSAFPID-0080",
"CSAFPID-0081",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-27903",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-27903"
}
]
},
{
"cve": "CVE-2026-27904",
"notes": [
{
"category": "description",
"text": "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0078",
"CSAFPID-0079",
"CSAFPID-0080",
"CSAFPID-0081",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, 3.1.4 or later.",
"product_ids": [
"CSAFPID-0078",
"CSAFPID-0079",
"CSAFPID-0080",
"CSAFPID-0081",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0078",
"CSAFPID-0079",
"CSAFPID-0080",
"CSAFPID-0081",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-27904",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-27904"
}
]
},
{
"cve": "CVE-2026-29045",
"notes": [
{
"category": "description",
"text": "Hono vulnerable to arbitrary file access via serveStatic vulnerability"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.4 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-29045",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-29045"
}
]
},
{
"cve": "CVE-2026-29085",
"notes": [
{
"category": "description",
"text": "Hono Vulnerable to SSE Control Field Injection via CR/LF in writeSSE()"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.4 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-29085",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-29085"
}
]
},
{
"cve": "CVE-2026-29086",
"notes": [
{
"category": "description",
"text": "Hono Vulnerable to Cookie Attribute Injection via Unsanitized domain and path in setCookie()"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.4 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-29086",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-29086"
}
]
},
{
"cve": "CVE-2026-29087",
"notes": [
{
"category": "description",
"text": "@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0085",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.19.10 or later.",
"product_ids": [
"CSAFPID-0085",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0085",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-29087",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-29087"
}
]
},
{
"cve": "CVE-2026-2950",
"notes": [
{
"category": "description",
"text": "lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0103",
"CSAFPID-0104",
"CSAFPID-0105",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.18.0 or later.",
"product_ids": [
"CSAFPID-0103",
"CSAFPID-0104",
"CSAFPID-0105",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0103",
"CSAFPID-0104",
"CSAFPID-0105",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-2950",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-2950"
}
]
},
{
"cve": "CVE-2026-30827",
"notes": [
{
"category": "description",
"text": "express-rate-limit is a basic rate-limiting middleware for Express. In versions starting from 8.0.0 and prior to versions 8.0.2, 8.1.1, 8.2.2, and 8.3.0, the default keyGenerator in express-rate-limit applies IPv6 subnet masking (/56 by default) to all addresses that net.isIPv6() returns true for. This includes IPv4-mapped IPv6 addresses (::ffff:x.x.x.x), which Node.js returns as request.ip on dual-stack servers. Because the first 80 bits of all IPv4-mapped addresses are zero, a /56 (or any /32 to /80) subnet mask produces the same network key (::/56) for every IPv4 client. This collapses all IPv4 traffic into a single rate-limit bucket: one client exhausting the limit causes HTTP 429 for all other IPv4 clients. This issue has been patched in versions 8.0.2, 8.1.1, 8.2.2, and 8.3.0."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-30827",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-30827"
}
]
},
{
"cve": "CVE-2026-3190",
"notes": [
{
"category": "description",
"text": "keycloak: Keycloak: Information Disclosure via improper role enforcement in UMA 2.0 Protection API"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0077",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 26.5.6 or later.",
"product_ids": [
"CSAFPID-0077",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0077",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-3190",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-3190"
}
]
},
{
"cve": "CVE-2026-31900",
"notes": [
{
"category": "description",
"text": "Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from the repository pyproject.toml. A malicious pull request could edit pyproject.toml to use a direct URL reference to a malicious repository. This could lead to arbitrary code execution in the context of the GitHub Action. Attackers could then gain access to secrets or permissions available in the context of the action. Version 26.3.0 fixes this vulnerability."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0176",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 26.3.0 or later.",
"product_ids": [
"CSAFPID-0176",
"CSAFPID-0331"
]
}
],
"title": "PYSEC-2026-2120",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-31900"
}
]
},
{
"cve": "CVE-2026-32141",
"notes": [
{
"category": "description",
"text": "flatted: flatted: Unbounded recursion DoS in parse() revive phase"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0086",
"CSAFPID-0087",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.4.0 or later.",
"product_ids": [
"CSAFPID-0086",
"CSAFPID-0087",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0086",
"CSAFPID-0087",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-32141",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-32141"
}
]
},
{
"cve": "CVE-2026-3219",
"notes": [
{
"category": "description",
"text": "pip: pip: Incorrect file installation due to improper archive handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 26.1 or later.",
"product_ids": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-3219",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-3219"
}
]
},
{
"cve": "CVE-2026-32274",
"notes": [
{
"category": "description",
"text": "Black is the uncompromising Python code formatter. Prior to 26.3.1, Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was placed in the filename without sanitization, which allowed an attacker who controls the value of this argument to write cache files to arbitrary file system locations. Fixed in Black 26.3.1."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0176",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 26.3.1 or later.",
"product_ids": [
"CSAFPID-0176",
"CSAFPID-0331"
]
}
],
"title": "PYSEC-2026-2121",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-32274"
}
]
},
{
"cve": "CVE-2026-32280",
"notes": [
{
"category": "description",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.9, 1.26.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-32280",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-32280"
}
]
},
{
"cve": "CVE-2026-32281",
"notes": [
{
"category": "description",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.9, 1.26.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-32281",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-32281"
}
]
},
{
"cve": "CVE-2026-32282",
"notes": [
{
"category": "description",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.9, 1.26.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-32282",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-32282"
}
]
},
{
"cve": "CVE-2026-32283",
"notes": [
{
"category": "description",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.9, 1.26.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-32283",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-32283"
}
]
},
{
"cve": "CVE-2026-32288",
"notes": [
{
"category": "description",
"text": "archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.9, 1.26.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-32288",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-32288"
}
]
},
{
"cve": "CVE-2026-32289",
"notes": [
{
"category": "description",
"text": "html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.9, 1.26.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-32289",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-32289"
}
]
},
{
"cve": "CVE-2026-32722",
"notes": [
{
"category": "description",
"text": "Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0272",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.19.2 or later.",
"product_ids": [
"CSAFPID-0272",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0272",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-32722",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-32722"
}
]
},
{
"cve": "CVE-2026-33055",
"notes": [
{
"category": "description",
"text": "tar-rs is a tar archive reading/writing library for Rust. Versions 0.4 ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0220",
"CSAFPID-0221",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.4.45 or later.",
"product_ids": [
"CSAFPID-0220",
"CSAFPID-0221",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0220",
"CSAFPID-0221",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33055",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33055"
}
]
},
{
"cve": "CVE-2026-33056",
"notes": [
{
"category": "description",
"text": "tar-rs: tar-rs: Arbitrary directory permission modification via crafted tar archive"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0220",
"CSAFPID-0221",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.4.45 or later.",
"product_ids": [
"CSAFPID-0220",
"CSAFPID-0221",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0220",
"CSAFPID-0221",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33056",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33056"
}
]
},
{
"cve": "CVE-2026-33169",
"notes": [
{
"category": "description",
"text": "rails: rails-activesupport: Active Support: Denial of Service via crafted long digit strings"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0088",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 or later.",
"product_ids": [
"CSAFPID-0088",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0088",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33169",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33169"
}
]
},
{
"cve": "CVE-2026-33170",
"notes": [
{
"category": "description",
"text": "Rails: Active Support: Active Support: Cross-Site Scripting (XSS) due to improper HTML safety flag propagation in SafeBuffer#%"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0088",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 or later.",
"product_ids": [
"CSAFPID-0088",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0088",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33170",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33170"
}
]
},
{
"cve": "CVE-2026-33176",
"notes": [
{
"category": "description",
"text": "Rails: Active Support: Active Support: Denial of Service via large scientific notation strings"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0088",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to ~> 7.2.3, >= 7.2.3.1, ~> 8.0.4, >= 8.0.4.1, >= 8.1.2.1 or later.",
"product_ids": [
"CSAFPID-0088",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0088",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33176",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33176"
}
]
},
{
"cve": "CVE-2026-33186",
"notes": [
{
"category": "description",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0012",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.79.3 or later.",
"product_ids": [
"CSAFPID-0012",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0012",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33186",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33186"
}
]
},
{
"cve": "CVE-2026-33228",
"notes": [
{
"category": "description",
"text": "flatted: Flatted: Prototype pollution vulnerability allows arbitrary code execution via crafted JSON."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0086",
"CSAFPID-0087",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.4.2 or later.",
"product_ids": [
"CSAFPID-0086",
"CSAFPID-0087",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0086",
"CSAFPID-0087",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33228",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33228"
}
]
},
{
"cve": "CVE-2026-3336",
"notes": [
{
"category": "description",
"text": "AWS-LC has PKCS7_verify Certificate Chain Validation Bypass"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0162",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.38.0 or later.",
"product_ids": [
"CSAFPID-0162",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0162",
"CSAFPID-0331"
]
}
],
"title": "GHSA-vw5v-4f2q-w9xf",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-3336"
}
]
},
{
"cve": "CVE-2026-3337",
"notes": [
{
"category": "description",
"text": "AWS-LC has Timing Side-Channel in AES-CCM Tag Verification"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0161",
"CSAFPID-0162",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.13.12 or later.",
"product_ids": [
"CSAFPID-0161",
"CSAFPID-0162",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0161",
"CSAFPID-0162",
"CSAFPID-0331"
]
}
],
"title": "GHSA-65p9-r9h6-22vj",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-3337"
}
]
},
{
"cve": "CVE-2026-3338",
"notes": [
{
"category": "description",
"text": "AWS-LC has PKCS7_verify Signature Validation Bypass"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0162",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.38.0 or later.",
"product_ids": [
"CSAFPID-0162",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0162",
"CSAFPID-0331"
]
}
],
"title": "GHSA-hfpc-8r3f-gw53",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-3338"
}
]
},
{
"cve": "CVE-2026-33532",
"notes": [
{
"category": "description",
"text": "yaml: yaml: Denial of Service via deeply nested YAML document parsing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0222",
"CSAFPID-0223",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.8.3, 1.10.3 or later.",
"product_ids": [
"CSAFPID-0222",
"CSAFPID-0223",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0222",
"CSAFPID-0223",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33532",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33532"
}
]
},
{
"cve": "CVE-2026-33671",
"notes": [
{
"category": "description",
"text": "picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0089",
"CSAFPID-0090",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.0.4, 3.0.2, 2.3.2 or later.",
"product_ids": [
"CSAFPID-0089",
"CSAFPID-0090",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0089",
"CSAFPID-0090",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33671",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33671"
}
]
},
{
"cve": "CVE-2026-33672",
"notes": [
{
"category": "description",
"text": "picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0089",
"CSAFPID-0090",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.0.4, 3.0.2, 2.3.2 or later.",
"product_ids": [
"CSAFPID-0089",
"CSAFPID-0090",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0089",
"CSAFPID-0090",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33672",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33672"
}
]
},
{
"cve": "CVE-2026-33811",
"notes": [
{
"category": "description",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.10, 1.26.3 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33811",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33811"
}
]
},
{
"cve": "CVE-2026-33814",
"notes": [
{
"category": "description",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.53.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33814",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33814"
}
]
},
{
"cve": "CVE-2026-33818",
"notes": [
{
"category": "description",
"text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.13, 1.26.6, 1.27.0-rc.3 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33818",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33818"
}
]
},
{
"cve": "CVE-2026-33870",
"notes": [
{
"category": "description",
"text": "io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.1.132.Final, 4.2.10.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33870",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33870"
}
]
},
{
"cve": "CVE-2026-33891",
"notes": [
{
"category": "description",
"text": "node-forge: node-forge: Denial of Service via infinite loop in BigInteger.modInverse()"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0041",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.4.0 or later.",
"product_ids": [
"CSAFPID-0041",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0041",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33891",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33891"
}
]
},
{
"cve": "CVE-2026-33894",
"notes": [
{
"category": "description",
"text": "node-forge: Forge: Signature Forgery via Weak RSASSA PKCS#1 v1.5 Verification"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0041",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.4.0 or later.",
"product_ids": [
"CSAFPID-0041",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0041",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33894",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33894"
}
]
},
{
"cve": "CVE-2026-33895",
"notes": [
{
"category": "description",
"text": "node-forge: Forge: Authentication bypass via forged Ed25519 cryptographic signatures"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0041",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.4.0 or later.",
"product_ids": [
"CSAFPID-0041",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0041",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33895",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33895"
}
]
},
{
"cve": "CVE-2026-33896",
"notes": [
{
"category": "description",
"text": "node-forge: Forge (node-forge): Certificate validation bypass allows unauthorized certificate issuance"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0041",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.4.0 or later.",
"product_ids": [
"CSAFPID-0041",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0041",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-33896",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-33896"
}
]
},
{
"cve": "CVE-2026-34043",
"notes": [
{
"category": "description",
"text": "serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0160",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 7.0.5 or later.",
"product_ids": [
"CSAFPID-0160",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0160",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-34043",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-34043"
}
]
},
{
"cve": "CVE-2026-34073",
"notes": [
{
"category": "description",
"text": "python-cryptography: Cryptography: Security bypass due to improper DNS name constraint validation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0076",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 46.0.6 or later.",
"product_ids": [
"CSAFPID-0076",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0076",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-34073",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-34073"
}
]
},
{
"cve": "CVE-2026-3449",
"notes": [
{
"category": "description",
"text": "@tootallnate/once: @tootallnate/once: Denial of Service due to incorrect control flow scoping with AbortSignal"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0273",
"CSAFPID-0274",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.0.1, 2.0.1 or later.",
"product_ids": [
"CSAFPID-0273",
"CSAFPID-0274",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 3.3,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0273",
"CSAFPID-0274",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-3449",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-3449"
}
]
},
{
"cve": "CVE-2026-34513",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: Denial of Service due to unbounded DNS cache"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.13.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-34513",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-34513"
}
]
},
{
"cve": "CVE-2026-34514",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: Header Injection via content_type parameter manipulation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.13.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-34514",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-34514"
}
]
},
{
"cve": "CVE-2026-34515",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: Information disclosure via static resource handler on Windows"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.13.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-34515",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-34515"
}
]
},
{
"cve": "CVE-2026-34516",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: Denial of Service via excessive multipart headers"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.13.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-34516",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-34516"
}
]
},
{
"cve": "CVE-2026-34517",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: Denial of Service via large multipart form fields"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.13.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-34517",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-34517"
}
]
},
{
"cve": "CVE-2026-34518",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: Information disclosure via retained Cookie and Proxy-Authorization headers during redirects"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.13.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-34518",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-34518"
}
]
},
{
"cve": "CVE-2026-34519",
"notes": [
{
"category": "description",
"text": "aiohttp: aiohttp: Header injection vulnerability via reason parameter"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.13.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-34519",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-34519"
}
]
},
{
"cve": "CVE-2026-34520",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: Header injection vulnerability due to improper character handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.13.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-34520",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-34520"
}
]
},
{
"cve": "CVE-2026-34525",
"notes": [
{
"category": "description",
"text": "aiohttp: aiohttp: Security bypass via multiple Host headers"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.13.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-34525",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-34525"
}
]
},
{
"cve": "CVE-2026-34993",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.0 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-34993",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-34993"
}
]
},
{
"cve": "CVE-2026-39406",
"notes": [
{
"category": "description",
"text": "@hono/node-server: Middleware bypass via repeated slashes in serveStatic"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0085",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.19.13 or later.",
"product_ids": [
"CSAFPID-0085",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0085",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39406",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39406"
}
]
},
{
"cve": "CVE-2026-39407",
"notes": [
{
"category": "description",
"text": "Hono: Middleware bypass via repeated slashes in serveStatic"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.12 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39407",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39407"
}
]
},
{
"cve": "CVE-2026-39408",
"notes": [
{
"category": "description",
"text": "Hono: Path traversal in toSSG() allows writing files outside the output directory"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.12 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39408",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39408"
}
]
},
{
"cve": "CVE-2026-39409",
"notes": [
{
"category": "description",
"text": "Hono has incorrect IP matching in ipRestriction() for IPv4-mapped IPv6 addresses"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.12 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39409",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39409"
}
]
},
{
"cve": "CVE-2026-39410",
"notes": [
{
"category": "description",
"text": "Hono: Non-breaking space prefix bypass in cookie name handling in getCookie()"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.12 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39410",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39410"
}
]
},
{
"cve": "CVE-2026-39820",
"notes": [
{
"category": "description",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.10, 1.26.3 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39820",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39820"
}
]
},
{
"cve": "CVE-2026-39821",
"notes": [
{
"category": "description",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.55.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39821",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39821"
}
]
},
{
"cve": "CVE-2026-39822",
"notes": [
{
"category": "description",
"text": "golang: Go os.Root: Symlink following vulnerability allows directory traversal"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.12, 1.26.5, 1.27.0-rc.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39822",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39822"
}
]
},
{
"cve": "CVE-2026-39823",
"notes": [
{
"category": "description",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.10, 1.26.3 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39823",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39823"
}
]
},
{
"cve": "CVE-2026-39824",
"notes": [
{
"category": "description",
"text": "Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0288",
"CSAFPID-0289",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.44.0 or later.",
"product_ids": [
"CSAFPID-0288",
"CSAFPID-0289",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0288",
"CSAFPID-0289",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39824",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39824"
}
]
},
{
"cve": "CVE-2026-39825",
"notes": [
{
"category": "description",
"text": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.10, 1.26.3 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39825",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39825"
}
]
},
{
"cve": "CVE-2026-39826",
"notes": [
{
"category": "description",
"text": "html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.10, 1.26.3 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39826",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39826"
}
]
},
{
"cve": "CVE-2026-39827",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.52.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39827",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39827"
}
]
},
{
"cve": "CVE-2026-39828",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.52.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39828",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39828"
}
]
},
{
"cve": "CVE-2026-39829",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.52.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39829",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39829"
}
]
},
{
"cve": "CVE-2026-39830",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.52.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39830",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39830"
}
]
},
{
"cve": "CVE-2026-39831",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.52.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39831",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39831"
}
]
},
{
"cve": "CVE-2026-39832",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.52.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39832",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39832"
}
]
},
{
"cve": "CVE-2026-39833",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.52.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39833",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39833"
}
]
},
{
"cve": "CVE-2026-39834",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.52.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39834",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39834"
}
]
},
{
"cve": "CVE-2026-39835",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.52.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39835",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39835"
}
]
},
{
"cve": "CVE-2026-39836",
"notes": [
{
"category": "description",
"text": "net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.10, 1.26.3 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39836",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39836"
}
]
},
{
"cve": "CVE-2026-39892",
"notes": [
{
"category": "description",
"text": "cryptography: Cryptography: Buffer overflow via non-contiguous buffer in API"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0076",
"CSAFPID-0129",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 46.0.7 or later.",
"product_ids": [
"CSAFPID-0076",
"CSAFPID-0129",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0076",
"CSAFPID-0129",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-39892",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-39892"
}
]
},
{
"cve": "CVE-2026-40181",
"notes": [
{
"category": "description",
"text": "react-router: React Router: Open redirect vulnerability via specially crafted URLs"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0073",
"CSAFPID-0224",
"CSAFPID-0193",
"CSAFPID-0225",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.23.3 or later.",
"product_ids": [
"CSAFPID-0073",
"CSAFPID-0224",
"CSAFPID-0193",
"CSAFPID-0225",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0073",
"CSAFPID-0224",
"CSAFPID-0193",
"CSAFPID-0225",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-40181",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-40181"
}
]
},
{
"cve": "CVE-2026-40192",
"notes": [
{
"category": "description",
"text": "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.2.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-40192",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-40192"
}
]
},
{
"cve": "CVE-2026-40983",
"notes": [
{
"category": "description",
"text": "micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0092",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.16.6, 1.15.12 or later.",
"product_ids": [
"CSAFPID-0092",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0092",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-40983",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-40983"
}
]
},
{
"cve": "CVE-2026-40984",
"notes": [
{
"category": "description",
"text": "micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0092",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.16.6, 1.15.12 or later.",
"product_ids": [
"CSAFPID-0092",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0092",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-40984",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-40984"
}
]
},
{
"cve": "CVE-2026-41205",
"notes": [
{
"category": "description",
"text": "mako: Mako: Information disclosure via path traversal vulnerability"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0093",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.3.11 or later.",
"product_ids": [
"CSAFPID-0093",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0093",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-41205",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-41205"
}
]
},
{
"cve": "CVE-2026-41239",
"notes": [
{
"category": "description",
"text": "DOMPurify: Vue 2: DOMPurify: Cross-site scripting due to incomplete sanitization of template expressions"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.4.0 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-41239",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-41239"
}
]
},
{
"cve": "CVE-2026-41240",
"notes": [
{
"category": "description",
"text": "DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.4.0 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-41240",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-41240"
}
]
},
{
"cve": "CVE-2026-41417",
"notes": [
{
"category": "description",
"text": "netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.1.133.Final, 4.2.13.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-41417",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-41417"
}
]
},
{
"cve": "CVE-2026-41676",
"notes": [
{
"category": "description",
"text": "rust-openssl provides OpenSSL bindings for the Rust programming langua ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.10.78 or later.",
"product_ids": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-41676",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-41676"
}
]
},
{
"cve": "CVE-2026-41677",
"notes": [
{
"category": "description",
"text": "rust-openssl provides OpenSSL bindings for the Rust programming langua ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.10.78 or later.",
"product_ids": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-41677",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-41677"
}
]
},
{
"cve": "CVE-2026-41678",
"notes": [
{
"category": "description",
"text": "rust-openssl provides OpenSSL bindings for the Rust programming langua ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.10.78 or later.",
"product_ids": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-41678",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-41678"
}
]
},
{
"cve": "CVE-2026-41681",
"notes": [
{
"category": "description",
"text": "rust-openssl provides OpenSSL bindings for the Rust programming langua ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.10.78 or later.",
"product_ids": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-41681",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-41681"
}
]
},
{
"cve": "CVE-2026-41898",
"notes": [
{
"category": "description",
"text": "rust-openssl provides OpenSSL bindings for the Rust programming langua ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.10.78 or later.",
"product_ids": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-41898",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-41898"
}
]
},
{
"cve": "CVE-2026-41907",
"notes": [
{
"category": "description",
"text": "uuid: uuid: Out-of-bounds write vulnerability impacts data integrity and confidentiality"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0226",
"CSAFPID-0227",
"CSAFPID-0228",
"CSAFPID-0229",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 11.1.1, 12.0.1, 13.0.1 or later.",
"product_ids": [
"CSAFPID-0226",
"CSAFPID-0227",
"CSAFPID-0228",
"CSAFPID-0229",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0226",
"CSAFPID-0227",
"CSAFPID-0228",
"CSAFPID-0229",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-41907",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-41907"
}
]
},
{
"cve": "CVE-2026-41988",
"notes": [
{
"category": "description",
"text": "uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6. In particular, UUID version 4, which is very commonly used, is unaffected by this issue."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 11.1.1 or later.",
"product_ids": [
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-41988",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-41988"
}
]
},
{
"cve": "CVE-2026-42198",
"notes": [
{
"category": "description",
"text": "jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0097",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 42.7.11 or later.",
"product_ids": [
"CSAFPID-0097",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0097",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42198",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42198"
}
]
},
{
"cve": "CVE-2026-42308",
"notes": [
{
"category": "description",
"text": "Pillow: Pillow: Denial of Service via integer overflow in font processing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.2.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42308",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42308"
}
]
},
{
"cve": "CVE-2026-42309",
"notes": [
{
"category": "description",
"text": "Pillow: Pillow: Denial of Service via specially crafted coordinate input"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.2.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42309",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42309"
}
]
},
{
"cve": "CVE-2026-42310",
"notes": [
{
"category": "description",
"text": "Pillow: Pillow: Denial of Service via malicious PDF processing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.2.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42310",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42310"
}
]
},
{
"cve": "CVE-2026-42311",
"notes": [
{
"category": "description",
"text": "Pillow: python-pillow: Pillow: Arbitrary code execution via malicious PSD file processing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.2.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42311",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42311"
}
]
},
{
"cve": "CVE-2026-42327",
"notes": [
{
"category": "description",
"text": "rust-openssl: rust-openssl: Arbitrary code execution via specially crafted certificate"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.10.79 or later.",
"product_ids": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42327",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42327"
}
]
},
{
"cve": "CVE-2026-42499",
"notes": [
{
"category": "description",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.10, 1.26.3 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42499",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42499"
}
]
},
{
"cve": "CVE-2026-42502",
"notes": [
{
"category": "description",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.55.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42502",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42502"
}
]
},
{
"cve": "CVE-2026-42504",
"notes": [
{
"category": "description",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.11, 1.26.4 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42504",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42504"
}
]
},
{
"cve": "CVE-2026-42505",
"notes": [
{
"category": "description",
"text": "crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.12, 1.26.5, 1.27.0-rc.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42505",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42505"
}
]
},
{
"cve": "CVE-2026-42506",
"notes": [
{
"category": "description",
"text": "golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.55.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42506",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42506"
}
]
},
{
"cve": "CVE-2026-42507",
"notes": [
{
"category": "description",
"text": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.11, 1.26.4 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42507",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42507"
}
]
},
{
"cve": "CVE-2026-42508",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.52.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42508",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42508"
}
]
},
{
"cve": "CVE-2026-42578",
"notes": [
{
"category": "description",
"text": "netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0275",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.1.133.Final, 4.2.13.Final or later.",
"product_ids": [
"CSAFPID-0275",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0275",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42578",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42578"
}
]
},
{
"cve": "CVE-2026-42580",
"notes": [
{
"category": "description",
"text": "netty: Netty: Request smuggling via chunk size parser integer overflow"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.13.Final, 4.1.133.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42580",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42580"
}
]
},
{
"cve": "CVE-2026-42581",
"notes": [
{
"category": "description",
"text": "netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.13.Final, 4.1.133.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42581",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42581"
}
]
},
{
"cve": "CVE-2026-42583",
"notes": [
{
"category": "description",
"text": "netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0098",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.1.133.Final or later.",
"product_ids": [
"CSAFPID-0098",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0098",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42583",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42583"
}
]
},
{
"cve": "CVE-2026-42584",
"notes": [
{
"category": "description",
"text": "netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.13.Final, 4.1.133.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42584",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42584"
}
]
},
{
"cve": "CVE-2026-42585",
"notes": [
{
"category": "description",
"text": "netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.13.Final, 4.1.133.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42585",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42585"
}
]
},
{
"cve": "CVE-2026-42587",
"notes": [
{
"category": "description",
"text": "netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.13.Final, 4.1.133.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-42587",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-42587"
}
]
},
{
"cve": "CVE-2026-4324",
"notes": [
{
"category": "description",
"text": "rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0210",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to >= 4.19.1 or later.",
"product_ids": [
"CSAFPID-0210",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0210",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-4324",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-4324"
}
]
},
{
"cve": "CVE-2026-44249",
"notes": [
{
"category": "description",
"text": "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0019",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.15.Final, 4.1.135.Final or later.",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0019",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-44249",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-44249"
}
]
},
{
"cve": "CVE-2026-4428",
"notes": [
{
"category": "description",
"text": "CRL Distribution Point Scope Check Logic Error in AWS-LC"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0161",
"CSAFPID-0162",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.13.13 or later.",
"product_ids": [
"CSAFPID-0161",
"CSAFPID-0162",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0161",
"CSAFPID-0162",
"CSAFPID-0331"
]
}
],
"title": "GHSA-9f94-5g5w-gf6r",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-4428"
}
]
},
{
"cve": "CVE-2026-44307",
"notes": [
{
"category": "description",
"text": "mako: Mako: Information disclosure via directory traversal"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0093",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.3.12 or later.",
"product_ids": [
"CSAFPID-0093",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-44307",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-44307"
}
]
},
{
"cve": "CVE-2026-44431",
"notes": [
{
"category": "description",
"text": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0034",
"CSAFPID-0099",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.7.0 or later.",
"product_ids": [
"CSAFPID-0034",
"CSAFPID-0099",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0034",
"CSAFPID-0099",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-44431",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-44431"
}
]
},
{
"cve": "CVE-2026-44432",
"notes": [
{
"category": "description",
"text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0099",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.7.0 or later.",
"product_ids": [
"CSAFPID-0099",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0099",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-44432",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-44432"
}
]
},
{
"cve": "CVE-2026-44455",
"notes": [
{
"category": "description",
"text": "hono/jsx has Unvalidated JSX Tag Names that May Allow HTML Injection"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.16 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-44455",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-44455"
}
]
},
{
"cve": "CVE-2026-44456",
"notes": [
{
"category": "description",
"text": "Hono: bodyLimit() can be bypassed for chunked / unknown-length requests"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.16 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-44456",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-44456"
}
]
},
{
"cve": "CVE-2026-44457",
"notes": [
{
"category": "description",
"text": "Hono's Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.18 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-44457",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-44457"
}
]
},
{
"cve": "CVE-2026-44458",
"notes": [
{
"category": "description",
"text": "Hono has CSS Declaration Injection via Style Object Values in JSX SSR"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.18 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-44458",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-44458"
}
]
},
{
"cve": "CVE-2026-44459",
"notes": [
{
"category": "description",
"text": "Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.18 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 3.8,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-44459",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-44459"
}
]
},
{
"cve": "CVE-2026-44489",
"notes": [
{
"category": "description",
"text": "Axios is a promise based HTTP client for the browser and Node.js. From 1.15.2 to before 1.16.0, nested objects created by utils.merge() (e.g., config.proxy) are still constructed as plain {} with Object.prototype in their chain. The setProxy() function at lib/adapters/http.js:209-223 reads proxy.username, proxy.password, and proxy.auth without hasOwnProperty checks. When Object.prototype.username is polluted, setProxy() constructs a Proxy-Authorization header with attacker-controlled credentials and injects it into every proxied HTTP request. This vulnerability is fixed in 1.16.0."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-44489",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-44489"
}
]
},
{
"cve": "CVE-2026-44662",
"notes": [
{
"category": "description",
"text": "rust-openssl provides OpenSSL bindings for the Rust programming langua ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.10.79 or later.",
"product_ids": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-44662",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-44662"
}
]
},
{
"cve": "CVE-2026-44705",
"notes": [
{
"category": "description",
"text": "tmp: path Traversal via unsanitized prefix/postfix enables directory escape"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0100",
"CSAFPID-0101",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.2.6 or later.",
"product_ids": [
"CSAFPID-0100",
"CSAFPID-0101",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0100",
"CSAFPID-0101",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-44705",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-44705"
}
]
},
{
"cve": "CVE-2026-44728",
"notes": [
{
"category": "description",
"text": "Babel is a compiler for writing next generation JavaScript. From 7.12. ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0102",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 7.29.4, 8.0.0-alpha.13 or later.",
"product_ids": [
"CSAFPID-0102",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0102",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-44728",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-44728"
}
]
},
{
"cve": "CVE-2026-45205",
"notes": [
{
"category": "description",
"text": "commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0230",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.15.0 or later.",
"product_ids": [
"CSAFPID-0230",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0230",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-45205",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-45205"
}
]
},
{
"cve": "CVE-2026-4539",
"notes": [
{
"category": "description",
"text": "pygments: Pygments: Denial of Service via inefficient regular expression processing in AdlLexer"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0276",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.20.0 or later.",
"product_ids": [
"CSAFPID-0276",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 3.3,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0276",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-4539",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-4539"
}
]
},
{
"cve": "CVE-2026-45409",
"notes": [
{
"category": "description",
"text": "python-idna: idna: Denial of Service via specially crafted long inputs"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0180",
"CSAFPID-0231",
"CSAFPID-0232",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.15 or later.",
"product_ids": [
"CSAFPID-0180",
"CSAFPID-0231",
"CSAFPID-0232",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0180",
"CSAFPID-0231",
"CSAFPID-0232",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-45409",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-45409"
}
]
},
{
"cve": "CVE-2026-45416",
"notes": [
{
"category": "description",
"text": "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0019",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.15.Final, 4.1.135.Final or later.",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0019",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-45416",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-45416"
}
]
},
{
"cve": "CVE-2026-45536",
"notes": [
{
"category": "description",
"text": "netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0233",
"CSAFPID-0234",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.15.Final, 4.1.135.Final or later.",
"product_ids": [
"CSAFPID-0233",
"CSAFPID-0234",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0233",
"CSAFPID-0234",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-45536",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-45536"
}
]
},
{
"cve": "CVE-2026-45736",
"notes": [
{
"category": "description",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0107",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 8.20.1 or later.",
"product_ids": [
"CSAFPID-0107",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0107",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-45736",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-45736"
}
]
},
{
"cve": "CVE-2026-45784",
"notes": [
{
"category": "description",
"text": "rust-openssl: rust-openssl: Heap Corruption from Incorrect Buffer Sizing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0235",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.10.80 or later.",
"product_ids": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0235",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0094",
"CSAFPID-0095",
"CSAFPID-0096",
"CSAFPID-0235",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-45784",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-45784"
}
]
},
{
"cve": "CVE-2026-46595",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.52.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-46595",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-46595"
}
]
},
{
"cve": "CVE-2026-46597",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.52.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-46597",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-46597"
}
]
},
{
"cve": "CVE-2026-46598",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.52.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-46598",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-46598"
}
]
},
{
"cve": "CVE-2026-46600",
"notes": [
{
"category": "description",
"text": "golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.56.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-46600",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-46600"
}
]
},
{
"cve": "CVE-2026-47265",
"notes": [
{
"category": "description",
"text": "python-aiohttp: AIOHTTP: Information disclosure via improper handling of cookies during cross-origin redirects"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.0 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-47265",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-47265"
}
]
},
{
"cve": "CVE-2026-47673",
"notes": [
{
"category": "description",
"text": "Hono: JWT middleware accepts any Authorization scheme, not only Bearer"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.21 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-47673",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-47673"
}
]
},
{
"cve": "CVE-2026-47674",
"notes": [
{
"category": "description",
"text": "Hono: IP Restriction bypasses static deny rules for non-canonical IPv6"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.21 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-47674",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-47674"
}
]
},
{
"cve": "CVE-2026-47675",
"notes": [
{
"category": "description",
"text": "Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.21 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-47675",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-47675"
}
]
},
{
"cve": "CVE-2026-47676",
"notes": [
{
"category": "description",
"text": "Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.21 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-47676",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-47676"
}
]
},
{
"cve": "CVE-2026-4800",
"notes": [
{
"category": "description",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0103",
"CSAFPID-0104",
"CSAFPID-0105",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.18.0 or later.",
"product_ids": [
"CSAFPID-0103",
"CSAFPID-0104",
"CSAFPID-0105",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0103",
"CSAFPID-0104",
"CSAFPID-0105",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-4800",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-4800"
}
]
},
{
"cve": "CVE-2026-48038",
"notes": [
{
"category": "description",
"text": "joi: joi: Denial of Service via uncaught RangeError on deeply nested input through recursive link() schemas"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0144",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 18.2.1, 17.13.4 or later.",
"product_ids": [
"CSAFPID-0144",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0144",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-48038",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-48038"
}
]
},
{
"cve": "CVE-2026-48522",
"notes": [
{
"category": "description",
"text": "python-pyjwt: PyJWT: Server-Side Request Forgery (SSRF) via uncontrolled URL fetching in PyJWKClient"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0005",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.13.0 or later.",
"product_ids": [
"CSAFPID-0005",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0005",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-48522",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-48522"
}
]
},
{
"cve": "CVE-2026-48523",
"notes": [
{
"category": "description",
"text": "python-pyjwt: PyJWT: Verifier-side algorithm bypass leads to unauthorized information access"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0005",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.13.0 or later.",
"product_ids": [
"CSAFPID-0005",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0005",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-48523",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-48523"
}
]
},
{
"cve": "CVE-2026-48524",
"notes": [
{
"category": "description",
"text": "python-pyjwt: PyJWT: Denial of Service via unverified JSON Web Token key IDs"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0005",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.13.0 or later.",
"product_ids": [
"CSAFPID-0005",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0005",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-48524",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-48524"
}
]
},
{
"cve": "CVE-2026-48525",
"notes": [
{
"category": "description",
"text": "python-pyjwt: PyJWT: Denial of Service via processing of crafted detached JWS tokens"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0005",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.13.0 or later.",
"product_ids": [
"CSAFPID-0005",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0005",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-48525",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-48525"
}
]
},
{
"cve": "CVE-2026-48526",
"notes": [
{
"category": "description",
"text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0005",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.13.0 or later.",
"product_ids": [
"CSAFPID-0005",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0005",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-48526",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-48526"
}
]
},
{
"cve": "CVE-2026-48587",
"notes": [
{
"category": "description",
"text": "django: Django: Information disclosure via improper handling of Vary header whitespace"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0070",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.2.15, 6.0.6 or later.",
"product_ids": [
"CSAFPID-0070",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0070",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-48587",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-48587"
}
]
},
{
"cve": "CVE-2026-48588",
"notes": [
{
"category": "description",
"text": "django: Django: Information disclosure due to improper caching of Set-Cookie responses"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.2.16, 6.0.7 or later.",
"product_ids": [
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-48588",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-48588"
}
]
},
{
"cve": "CVE-2026-4867",
"notes": [
{
"category": "description",
"text": "path-to-regexp: path-to-regexp: Denial of Service via catastrophic backtracking from malformed URL parameters"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0106",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.1.13 or later.",
"product_ids": [
"CSAFPID-0106",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0106",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-4867",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-4867"
}
]
},
{
"cve": "CVE-2026-48758",
"notes": [
{
"category": "description",
"text": "sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0236",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.2.1 or later.",
"product_ids": [
"CSAFPID-0236",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0236",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-48758",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-48758"
}
]
},
{
"cve": "CVE-2026-48779",
"notes": [
{
"category": "description",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0107",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.2.5, 6.2.4, 7.5.11, 8.21.0 or later.",
"product_ids": [
"CSAFPID-0107",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0107",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-48779",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-48779"
}
]
},
{
"cve": "CVE-2026-48801",
"notes": [
{
"category": "description",
"text": "linkify-it: linkify-it: Denial of Service via algorithmic complexity vulnerability"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0108",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.0.1 or later.",
"product_ids": [
"CSAFPID-0108",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0108",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-48801",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-48801"
}
]
},
{
"cve": "CVE-2026-48815",
"notes": [
{
"category": "description",
"text": "sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0109",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.1.1 or later.",
"product_ids": [
"CSAFPID-0109",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0109",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-48815",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-48815"
}
]
},
{
"cve": "CVE-2026-48817",
"notes": [
{
"category": "description",
"text": "starlette: Starlette: Information disclosure and unintended method execution via non-standard HTTP methods"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0110",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.1.0 or later.",
"product_ids": [
"CSAFPID-0110",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0110",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-48817",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-48817"
}
]
},
{
"cve": "CVE-2026-48818",
"notes": [
{
"category": "description",
"text": "starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0110",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.1.0 or later.",
"product_ids": [
"CSAFPID-0110",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0110",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-48818",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-48818"
}
]
},
{
"cve": "CVE-2026-48988",
"notes": [
{
"category": "description",
"text": "markdown-it: markdown-it: Denial of Service via quadratic processing of smartquotes with typographer enabled"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0063",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 14.2.0 or later.",
"product_ids": [
"CSAFPID-0063",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0063",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-48988",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-48988"
}
]
},
{
"cve": "CVE-2026-4923",
"notes": [
{
"category": "description",
"text": "path-to-regexp: path-to-regexp: Denial of Service via specially crafted paths with multiple wildcards"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0111",
"CSAFPID-0112",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 8.4.0 or later.",
"product_ids": [
"CSAFPID-0111",
"CSAFPID-0112",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0111",
"CSAFPID-0112",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-4923",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-4923"
}
]
},
{
"cve": "CVE-2026-4926",
"notes": [
{
"category": "description",
"text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0111",
"CSAFPID-0112",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 8.4.0 or later.",
"product_ids": [
"CSAFPID-0111",
"CSAFPID-0112",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0111",
"CSAFPID-0112",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-4926",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-4926"
}
]
},
{
"cve": "CVE-2026-49356",
"notes": [
{
"category": "description",
"text": "@babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0277",
"CSAFPID-0278",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 8.0.0-rc.6, 7.29.6 or later.",
"product_ids": [
"CSAFPID-0277",
"CSAFPID-0278",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
"baseScore": 3.6,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0277",
"CSAFPID-0278",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-49356",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-49356"
}
]
},
{
"cve": "CVE-2026-49458",
"notes": [
{
"category": "description",
"text": "dompurify: DOMPurify: Cross-site scripting due to improper sanitization of DOM nodes"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.4.6 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-49458",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-49458"
}
]
},
{
"cve": "CVE-2026-49459",
"notes": [
{
"category": "description",
"text": "dompurify: DOMPurify: Cross-site scripting bypass allows arbitrary script execution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.4.6 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-49459",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-49459"
}
]
},
{
"cve": "CVE-2026-49476",
"notes": [
{
"category": "description",
"text": "python-soupsieve: Soupsieve: Denial of Service via crafted CSS selector string"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0113",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.8.4 or later.",
"product_ids": [
"CSAFPID-0113",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0113",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-49476",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-49476"
}
]
},
{
"cve": "CVE-2026-49477",
"notes": [
{
"category": "description",
"text": "soupsieve: Soupsieve: Denial of Service via crafted CSS selector strings"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0113",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.8.4 or later.",
"product_ids": [
"CSAFPID-0113",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0113",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-49477",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-49477"
}
]
},
{
"cve": "CVE-2026-49978",
"notes": [
{
"category": "description",
"text": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.4.7 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-49978",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-49978"
}
]
},
{
"cve": "CVE-2026-49982",
"notes": [
{
"category": "description",
"text": "tmp: Type-confusion bypass of _assertPath allows path traversal via non-string prefix/postfix/template"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0114",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.2.7 or later.",
"product_ids": [
"CSAFPID-0114",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0114",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-49982",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-49982"
}
]
},
{
"cve": "CVE-2026-50010",
"notes": [
{
"category": "description",
"text": "netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0019",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.15.Final, 4.1.135.Final or later.",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0019",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-50010",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-50010"
}
]
},
{
"cve": "CVE-2026-50020",
"notes": [
{
"category": "description",
"text": "netty-codec-http: Netty: Data manipulation via request-boundary confusion in HttpObjectDecoder"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.15.Final, 4.1.135.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-50020",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-50020"
}
]
},
{
"cve": "CVE-2026-50269",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: CRLF injection in multipart headers"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.0 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-50269",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-50269"
}
]
},
{
"cve": "CVE-2026-51536",
"notes": [
{
"category": "description",
"text": "In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the length parameter is inconsistently typed across the call stack. Specifically, an upstream length calculated as an int is passed to a downstream function that expects an EipInt16 (a 16-bit signed integer). If a maliciously crafted packet with specific length fields is processed, the length parameter can overflow or be truncated into a negative value. This negative length bypasses subsequent bounds checking (due to signed/unsigned comparison issues) and is ultimately used in memory operations, leading to a Stack Buffer Overflow when reading data in DecodePaddedEPath."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-51536",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-51536"
}
]
},
{
"cve": "CVE-2026-51537",
"notes": [
{
"category": "description",
"text": "EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue is remotely triggerable via network traffic and does not require authentication."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-51537",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-51537"
}
]
},
{
"cve": "CVE-2026-51538",
"notes": [
{
"category": "description",
"text": "EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an Incorrect Access Control vulnerability in its handling of encapsulation sessions. When the server processes critical encapsulation commands, it verifies whether the provided session_handle exists in the global session list, but it fails to verify whether that handle belongs to the specific TCP connection issuing the request. Because there is no strong binding between a session handle and its originating socket, any attacker on the network can use a valid session handle created by another legitimate client to bypass access controls."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-51538",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-51538"
}
]
},
{
"cve": "CVE-2026-51540",
"notes": [
{
"category": "description",
"text": "OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the processing of connected explicit messages (SendUnitData)."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-51540",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-51540"
}
]
},
{
"cve": "CVE-2026-51541",
"notes": [
{
"category": "description",
"text": "OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged EPath size. An attacker can send a valid ENIP SendRRData frame carrying a very short CIP payload whose path_size field claims that many more path words are present than are actually available. Because the parser trusts the attacker-controlled path_size and continues decoding path segments without a remaining-length boundary, it reads beyond the end of the stack receive buffer."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-51541",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-51541"
}
]
},
{
"cve": "CVE-2026-53537",
"notes": [
{
"category": "description",
"text": "multipart: Python-Multipart: Information disclosure via header parsing discrepancy"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0115",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.0.30 or later.",
"product_ids": [
"CSAFPID-0115",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0115",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-53537",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-53537"
}
]
},
{
"cve": "CVE-2026-53538",
"notes": [
{
"category": "description",
"text": "python-multipart: Python-Multipart: Information disclosure due to parser differential in form data handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0115",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.0.30 or later.",
"product_ids": [
"CSAFPID-0115",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0115",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-53538",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-53538"
}
]
},
{
"cve": "CVE-2026-53539",
"notes": [
{
"category": "description",
"text": "python-multipart: Python-Multipart: Denial of Service via crafted form-urlencoded bodies"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0115",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.0.30 or later.",
"product_ids": [
"CSAFPID-0115",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0115",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-53539",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-53539"
}
]
},
{
"cve": "CVE-2026-53540",
"notes": [
{
"category": "description",
"text": "python-multipart: Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0115",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.0.31 or later.",
"product_ids": [
"CSAFPID-0115",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0115",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-53540",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-53540"
}
]
},
{
"cve": "CVE-2026-53550",
"notes": [
{
"category": "description",
"text": "js-yaml: js-yaml: Denial of Service via crafted YAML merge keys"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0123",
"CSAFPID-0124",
"CSAFPID-0125",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.0, 3.15.0 or later.",
"product_ids": [
"CSAFPID-0123",
"CSAFPID-0124",
"CSAFPID-0125",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0123",
"CSAFPID-0124",
"CSAFPID-0125",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-53550",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-53550"
}
]
},
{
"cve": "CVE-2026-53632",
"notes": [
{
"category": "description",
"text": "launch-editor: launch-editor: Credential compromise via NTLMv2 password hash leak through UNC path access"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0066",
"CSAFPID-0067",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.14.1 or later.",
"product_ids": [
"CSAFPID-0066",
"CSAFPID-0067",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-53632",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-53632"
}
]
},
{
"cve": "CVE-2026-53655",
"notes": [
{
"category": "description",
"text": "node-tar: node-tar: File smuggling due to inconsistent tar archive parsing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0014",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 7.5.16 or later.",
"product_ids": [
"CSAFPID-0014",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0014",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-53655",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-53655"
}
]
},
{
"cve": "CVE-2026-53666",
"notes": [
{
"category": "description",
"text": "react-router: React Router: Information disclosure via client-side constructor execution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0193",
"CSAFPID-0225",
"CSAFPID-0237",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 7.18.0 or later.",
"product_ids": [
"CSAFPID-0193",
"CSAFPID-0225",
"CSAFPID-0237",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0193",
"CSAFPID-0225",
"CSAFPID-0237",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-53666",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-53666"
}
]
},
{
"cve": "CVE-2026-53668",
"notes": [
{
"category": "description",
"text": "react-router: react-router-dom: React Router: Cross-Site Scripting (XSS) via open redirects"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0238",
"CSAFPID-0239",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 6.30.6 or later.",
"product_ids": [
"CSAFPID-0238",
"CSAFPID-0239",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0238",
"CSAFPID-0239",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-53668",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-53668"
}
]
},
{
"cve": "CVE-2026-53669",
"notes": [
{
"category": "description",
"text": "react-router: React Router: Open Redirect vulnerability via backslashes in navigation components"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0193",
"CSAFPID-0225",
"CSAFPID-0237",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 7.18.0 or later.",
"product_ids": [
"CSAFPID-0193",
"CSAFPID-0225",
"CSAFPID-0237",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0193",
"CSAFPID-0225",
"CSAFPID-0237",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-53669",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-53669"
}
]
},
{
"cve": "CVE-2026-53877",
"notes": [
{
"category": "description",
"text": "django: Django: Information disclosure via heap buffer over-read in GDALRaster"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.2.16, 6.0.7 or later.",
"product_ids": [
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-53877",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-53877"
}
]
},
{
"cve": "CVE-2026-53878",
"notes": [
{
"category": "description",
"text": "django: Django: HTTP header injection via DomainNameValidator accepting newlines"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.2.16, 6.0.7 or later.",
"product_ids": [
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-53878",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-53878"
}
]
},
{
"cve": "CVE-2026-54058",
"notes": [
{
"category": "description",
"text": "Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.3.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54058",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54058"
}
]
},
{
"cve": "CVE-2026-54059",
"notes": [
{
"category": "description",
"text": "python-pillow: Pillow: Denial of Service via crafted PCF font data"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.3.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54059",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54059"
}
]
},
{
"cve": "CVE-2026-54060",
"notes": [
{
"category": "description",
"text": "python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.3.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54060",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54060"
}
]
},
{
"cve": "CVE-2026-54273",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: Denial of Service via excessive pipelined requests"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.1 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54273",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54273"
}
]
},
{
"cve": "CVE-2026-54274",
"notes": [
{
"category": "description",
"text": "aiohttp: aiohttp: Denial of Service via incomplete websocket frame payloads"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.1 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54274",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54274"
}
]
},
{
"cve": "CVE-2026-54275",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: TLS SNI check bypass via connection reuse"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.1 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54275",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54275"
}
]
},
{
"cve": "CVE-2026-54276",
"notes": [
{
"category": "description",
"text": "aiohttp: aiohttp: Information disclosure via DigestAuthMiddleware after cross-origin redirect"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.1 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54276",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54276"
}
]
},
{
"cve": "CVE-2026-54277",
"notes": [
{
"category": "description",
"text": "aiohttp: aiohttp: Denial of Service via oversized HTTP request lines bypassing max_line_size check"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.1 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54277",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54277"
}
]
},
{
"cve": "CVE-2026-54278",
"notes": [
{
"category": "description",
"text": "aiohttp: aiohttp: Denial of Service due to excessive memory consumption from compressed request body"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.1 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54278",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54278"
}
]
},
{
"cve": "CVE-2026-54279",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: Host-Only Cookies Become Domain Cookies After CookieJar Persistence"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.1 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54279",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54279"
}
]
},
{
"cve": "CVE-2026-54280",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: Denial of Service due to improper resource handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.1 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54280",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54280"
}
]
},
{
"cve": "CVE-2026-54282",
"notes": [
{
"category": "description",
"text": "starlette: Starlette: Information disclosure due to improper HTTP request path validation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0110",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.3.0 or later.",
"product_ids": [
"CSAFPID-0110",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0110",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54282",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54282"
}
]
},
{
"cve": "CVE-2026-54283",
"notes": [
{
"category": "description",
"text": "starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0110",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.3.1 or later.",
"product_ids": [
"CSAFPID-0110",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0110",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54283",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54283"
}
]
},
{
"cve": "CVE-2026-54286",
"notes": [
{
"category": "description",
"text": "hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.25 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54286",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54286"
}
]
},
{
"cve": "CVE-2026-54287",
"notes": [
{
"category": "description",
"text": "hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.25 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54287",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54287"
}
]
},
{
"cve": "CVE-2026-54288",
"notes": [
{
"category": "description",
"text": "hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length`"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.25 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54288",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54288"
}
]
},
{
"cve": "CVE-2026-54289",
"notes": [
{
"category": "description",
"text": "hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.25 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54289",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54289"
}
]
},
{
"cve": "CVE-2026-54290",
"notes": [
{
"category": "description",
"text": "hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.25 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54290",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54290"
}
]
},
{
"cve": "CVE-2026-54291",
"notes": [
{
"category": "description",
"text": "org.postgresql/postgresql: com.ongres.scram/scram-client: pgjdbc: Man-in-the-middle protection bypass via SCRAM-SHA-256-PLUS downgrade"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0097",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 42.7.12 or later.",
"product_ids": [
"CSAFPID-0097",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0097",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54291",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54291"
}
]
},
{
"cve": "CVE-2026-54466",
"notes": [
{
"category": "description",
"text": "websocket-driver is a WebSocket protocol handler with pluggable I/O. P ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0013",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.7.5 or later.",
"product_ids": [
"CSAFPID-0013",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0013",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54466",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54466"
}
]
},
{
"cve": "CVE-2026-54490",
"notes": [
{
"category": "description",
"text": "websocket-driver is a WebSocket protocol handler with pluggable I/O. P ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0013",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.7.5 or later.",
"product_ids": [
"CSAFPID-0013",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54490",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54490"
}
]
},
{
"cve": "CVE-2026-54512",
"notes": [
{
"category": "description",
"text": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0116",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.18.8, 3.1.4, 2.21.4 or later.",
"product_ids": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54512",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54512"
}
]
},
{
"cve": "CVE-2026-54513",
"notes": [
{
"category": "description",
"text": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0116",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.18.8, 2.21.4, 3.1.4 or later.",
"product_ids": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54513",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54513"
}
]
},
{
"cve": "CVE-2026-54514",
"notes": [
{
"category": "description",
"text": "jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0116",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.18.8, 2.21.4, 3.1.4 or later.",
"product_ids": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54514",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54514"
}
]
},
{
"cve": "CVE-2026-54515",
"notes": [
{
"category": "description",
"text": "jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0116",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.1.4, 2.18.9, 2.21.5, 2.22.1 or later.",
"product_ids": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-54515",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-54515"
}
]
},
{
"cve": "CVE-2026-55153",
"notes": [
{
"category": "description",
"text": "com.mchange/mchange-commons-java: mchange-commons-java: Remote code execution via JNDI injection"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0117",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.6.0 or later.",
"product_ids": [
"CSAFPID-0117",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0117",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-55153",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-55153"
}
]
},
{
"cve": "CVE-2026-55379",
"notes": [
{
"category": "description",
"text": "python-pillow: Pillow: Denial of Service via crafted BDF font file"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.3.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-55379",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-55379"
}
]
},
{
"cve": "CVE-2026-55380",
"notes": [
{
"category": "description",
"text": "python-pillow: Pillow: Denial of Service via crafted GD 2.x image file"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.3.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-55380",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-55380"
}
]
},
{
"cve": "CVE-2026-55602",
"notes": [
{
"category": "description",
"text": "http-proxy-middleware: http-proxy-middleware: Unintended backend routing due to crafted Host header"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0240",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.0.6, 4.1.0, 2.0.10 or later.",
"product_ids": [
"CSAFPID-0240",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0240",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-55602",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-55602"
}
]
},
{
"cve": "CVE-2026-55798",
"notes": [
{
"category": "description",
"text": "python-pillow: Pillow: Arbitrary command injection via shell metacharacters in file paths"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.3.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-55798",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-55798"
}
]
},
{
"cve": "CVE-2026-55831",
"notes": [
{
"category": "description",
"text": "io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.16.Final, 4.1.136.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-55831",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-55831"
}
]
},
{
"cve": "CVE-2026-55833",
"notes": [
{
"category": "description",
"text": "netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.16.Final, 4.1.136.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-55833",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-55833"
}
]
},
{
"cve": "CVE-2026-55856",
"notes": [
{
"category": "description",
"text": "org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Cleartext password disclosure via man-in-the-middle during initial handshake"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0241",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.7.14, 3.3.5, 3.4.3, 3.5.9 or later.",
"product_ids": [
"CSAFPID-0241",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0241",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-55856",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-55856"
}
]
},
{
"cve": "CVE-2026-55857",
"notes": [
{
"category": "description",
"text": "org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Information Disclosure via Insecure PAM Dialog Authentication"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0241",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.7.14, 3.3.5, 3.4.3, 3.5.9 or later.",
"product_ids": [
"CSAFPID-0241",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0241",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-55857",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-55857"
}
]
},
{
"cve": "CVE-2026-55858",
"notes": [
{
"category": "description",
"text": "org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Silent data corruption due to character set mismatch"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0241",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.7.14, 3.3.5, 3.4.3, 3.5.9 or later.",
"product_ids": [
"CSAFPID-0241",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0241",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-55858",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-55858"
}
]
},
{
"cve": "CVE-2026-5588",
"notes": [
{
"category": "description",
"text": "bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0242",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.84 or later.",
"product_ids": [
"CSAFPID-0242",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0242",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-5588",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-5588"
}
]
},
{
"cve": "CVE-2026-56745",
"notes": [
{
"category": "description",
"text": "netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.16.Final, 4.1.136.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56745",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56745"
}
]
},
{
"cve": "CVE-2026-56746",
"notes": [
{
"category": "description",
"text": "io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.16.Final, 4.1.136.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56746",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56746"
}
]
},
{
"cve": "CVE-2026-56761",
"notes": [
{
"category": "description",
"text": "hono Improperly Handles JSX Attribute Names Allows HTML Injection in hono/jsx SSR"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.14 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56761",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56761"
}
]
},
{
"cve": "CVE-2026-56762",
"notes": [
{
"category": "description",
"text": "Hono missing validation of cookie name on write path in setCookie()"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.12 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56762",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56762"
}
]
},
{
"cve": "CVE-2026-56763",
"notes": [
{
"category": "description",
"text": "Hono vulnerable to Prototype Pollution possible through __proto__ key allowed in parseBody({ dot: true })"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.7 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56763",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56763"
}
]
},
{
"cve": "CVE-2026-56764",
"notes": [
{
"category": "description",
"text": "Hono added timing comparison hardening in basicAuth and bearerAuth"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.11.10 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "GHSA-gq3j-xvxp-8hrf",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56764"
}
]
},
{
"cve": "CVE-2026-56851",
"notes": [
{
"category": "description",
"text": "golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0118",
"CSAFPID-0119",
"CSAFPID-0120",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.41.0 or later.",
"product_ids": [
"CSAFPID-0118",
"CSAFPID-0119",
"CSAFPID-0120",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0118",
"CSAFPID-0119",
"CSAFPID-0120",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56851",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56851"
}
]
},
{
"cve": "CVE-2026-56852",
"notes": [
{
"category": "description",
"text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0118",
"CSAFPID-0119",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.39.0 or later.",
"product_ids": [
"CSAFPID-0118",
"CSAFPID-0119",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0118",
"CSAFPID-0119",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56852",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56852"
}
]
},
{
"cve": "CVE-2026-56853",
"notes": [
{
"category": "description",
"text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.13, 1.26.6, 1.27.0-rc.3 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56853",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56853"
}
]
},
{
"cve": "CVE-2026-56854",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0121",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.55.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0121",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0121",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56854",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56854"
}
]
},
{
"cve": "CVE-2026-56855",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0121",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.56.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0121",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0121",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56855",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56855"
}
]
},
{
"cve": "CVE-2026-56857",
"notes": [
{
"category": "description",
"text": "os: golang: golang: Directory traversal via Windows junction handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.26.9, 1.27.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56857",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56857"
}
]
},
{
"cve": "CVE-2026-56858",
"notes": [
{
"category": "description",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.13, 1.26.6, 1.27.0-rc.3 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56858",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56858"
}
]
},
{
"cve": "CVE-2026-56859",
"notes": [
{
"category": "description",
"text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.13, 1.26.6, 1.27.0-rc.3 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56859",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56859"
}
]
},
{
"cve": "CVE-2026-56860",
"notes": [
{
"category": "description",
"text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.13, 1.26.6, 1.27.0-rc.3 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56860",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56860"
}
]
},
{
"cve": "CVE-2026-56862",
"notes": [
{
"category": "description",
"text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.25.13, 1.26.6, 1.27.0-rc.3 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56862",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56862"
}
]
},
{
"cve": "CVE-2026-56864",
"notes": [
{
"category": "description",
"text": "golang.org/x/mod/sumdb: golang.org/x/mod/sumdb: Integrity bypass via malicious GOSUMDB"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0122",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.40.0 or later.",
"product_ids": [
"CSAFPID-0122",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0122",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56864",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56864"
}
]
},
{
"cve": "CVE-2026-56865",
"notes": [
{
"category": "description",
"text": "golang.org/x/mod/sumdb/tlog: golang.org/x/mod/sumdb/tlog: Supply chain compromise via transparency log tile verification bypass"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0122",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.40.0 or later.",
"product_ids": [
"CSAFPID-0122",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0122",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56865",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56865"
}
]
},
{
"cve": "CVE-2026-56866",
"notes": [
{
"category": "description",
"text": "net/http: golang: golang: Cross-user response poisoning via desynchronized HTTP CONNECT connections"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.26.9, 1.27.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56866",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56866"
}
]
},
{
"cve": "CVE-2026-56876",
"notes": [
{
"category": "description",
"text": "extract-zip: github.com/maxogden/extract-zip: extract-zip: Arbitrary file write and information disclosure via symlink validation bypass"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0072",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0072",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-56876",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-56876"
}
]
},
{
"cve": "CVE-2026-57585",
"notes": [
{
"category": "description",
"text": "MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0163",
"CSAFPID-0164",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.2.1 or later.",
"product_ids": [
"CSAFPID-0163",
"CSAFPID-0164",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0163",
"CSAFPID-0164",
"CSAFPID-0331"
]
}
],
"title": "GHSA-6v7p-g79w-8964",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-57585"
}
]
},
{
"cve": "CVE-2026-59197",
"notes": [
{
"category": "description",
"text": "Pillow: Pillow: Native heap out-of-bounds write"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.3.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59197",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59197"
}
]
},
{
"cve": "CVE-2026-59198",
"notes": [
{
"category": "description",
"text": "Pillow: Pillow: Information disclosure via TGA RLE encoder out-of-bounds read"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.3.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59198",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59198"
}
]
},
{
"cve": "CVE-2026-59199",
"notes": [
{
"category": "description",
"text": "Pillow: Pillow: Denial of Service via out-of-bounds write in image processing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.3.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59199",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59199"
}
]
},
{
"cve": "CVE-2026-59200",
"notes": [
{
"category": "description",
"text": "Pillow: Pillow: Denial of service via crafted PDF stream"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.3.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59200",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59200"
}
]
},
{
"cve": "CVE-2026-59203",
"notes": [
{
"category": "description",
"text": "Pillow: Pillow: Denial of Service via crafted EPS file"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.3.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59203",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59203"
}
]
},
{
"cve": "CVE-2026-59204",
"notes": [
{
"category": "description",
"text": "Pillow: Pillow: Denial of Service via crafted JPEG2000 image"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.3.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59204",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59204"
}
]
},
{
"cve": "CVE-2026-59205",
"notes": [
{
"category": "description",
"text": "Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0010",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 12.3.0 or later.",
"product_ids": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0010",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59205",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59205"
}
]
},
{
"cve": "CVE-2026-59869",
"notes": [
{
"category": "description",
"text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0123",
"CSAFPID-0124",
"CSAFPID-0125",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.15.0, 4.3.0 or later.",
"product_ids": [
"CSAFPID-0123",
"CSAFPID-0124",
"CSAFPID-0125",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0123",
"CSAFPID-0124",
"CSAFPID-0125",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59869",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59869"
}
]
},
{
"cve": "CVE-2026-59871",
"notes": [
{
"category": "description",
"text": "node-tar: node-tar: Denial of Service due to incorrect PAX path handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0014",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 7.5.18 or later.",
"product_ids": [
"CSAFPID-0014",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0014",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59871",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59871"
}
]
},
{
"cve": "CVE-2026-59873",
"notes": [
{
"category": "description",
"text": "tar: node-tar: Denial of Service via crafted gzip bomb"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0014",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 7.5.19 or later.",
"product_ids": [
"CSAFPID-0014",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0014",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59873",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59873"
}
]
},
{
"cve": "CVE-2026-59874",
"notes": [
{
"category": "description",
"text": "tar: Node-tar: Denial of Service via malformed tar archive header"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0014",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 7.5.18 or later.",
"product_ids": [
"CSAFPID-0014",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0014",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59874",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59874"
}
]
},
{
"cve": "CVE-2026-59875",
"notes": [
{
"category": "description",
"text": "node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0014",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 7.5.17 or later.",
"product_ids": [
"CSAFPID-0014",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0014",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59875",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59875"
}
]
},
{
"cve": "CVE-2026-59881",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: Denial of Service via unnegotiated WebSocket compression"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.2 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59881",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59881"
}
]
},
{
"cve": "CVE-2026-59887",
"notes": [
{
"category": "description",
"text": "linkify-it: linkify-it: Denial of Service via crafted mailto: links"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0108",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.0.2 or later.",
"product_ids": [
"CSAFPID-0108",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0108",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59887",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59887"
}
]
},
{
"cve": "CVE-2026-59888",
"notes": [
{
"category": "description",
"text": "com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0116",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.18.8, 2.21.4 or later.",
"product_ids": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59888",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59888"
}
]
},
{
"cve": "CVE-2026-59889",
"notes": [
{
"category": "description",
"text": "com.fasterxml.jackson.core/jackson-databind: Jackson-databind: Privilege escalation via improper handling of @JsonUnwrapped properties"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0116",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.21.5, 2.18.9, 2.22.1 or later.",
"product_ids": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59889",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59889"
}
]
},
{
"cve": "CVE-2026-59890",
"notes": [
{
"category": "description",
"text": "setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0033",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0043",
"CSAFPID-0243",
"CSAFPID-0244",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 83.0.0 or later.",
"product_ids": [
"CSAFPID-0033",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0043",
"CSAFPID-0243",
"CSAFPID-0244",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0033",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0043",
"CSAFPID-0243",
"CSAFPID-0244",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59890",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59890"
}
]
},
{
"cve": "CVE-2026-59895",
"notes": [
{
"category": "description",
"text": "hono: Hono: Arbitrary markup injection via improper handling of class names in server-side rendering."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.27 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59895",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59895"
}
]
},
{
"cve": "CVE-2026-59897",
"notes": [
{
"category": "description",
"text": "hono: Hono: Information disclosure due to incorrect header de-duplication in AWS API Gateway v1 adapter"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.27 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59897",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59897"
}
]
},
{
"cve": "CVE-2026-59898",
"notes": [
{
"category": "description",
"text": "io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.16.Final, 4.1.136.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59898",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59898"
}
]
},
{
"cve": "CVE-2026-59899",
"notes": [
{
"category": "description",
"text": "io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.16.Final, 4.1.136.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59899",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59899"
}
]
},
{
"cve": "CVE-2026-59901",
"notes": [
{
"category": "description",
"text": "io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0098",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.1.136.Final or later.",
"product_ids": [
"CSAFPID-0098",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0098",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59901",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59901"
}
]
},
{
"cve": "CVE-2026-59903",
"notes": [
{
"category": "description",
"text": "io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.17.Final, 4.1.137.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59903",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59903"
}
]
},
{
"cve": "CVE-2026-59921",
"notes": [
{
"category": "description",
"text": "io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0091",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.16.Final, 4.1.136.Final or later.",
"product_ids": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0091",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59921",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59921"
}
]
},
{
"cve": "CVE-2026-59950",
"notes": [
{
"category": "description",
"text": "MCP Python SDK: WebSocket server transport does not support Host/Origin validation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0126",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.28.1 or later.",
"product_ids": [
"CSAFPID-0126",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0126",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59950",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59950"
}
]
},
{
"cve": "CVE-2026-59951",
"notes": [
{
"category": "description",
"text": "mcp: mcp: Denial of Service via session memory exhaustion in streamable HTTP servers"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0126",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.30.0, 2.2.0 or later.",
"product_ids": [
"CSAFPID-0126",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0126",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59951"
},
{
"cve": "CVE-2026-59980",
"notes": [
{
"category": "description",
"text": "hpack: golang.org/x/net/http2/hpack: hpack: Denial of Service via malformed HTTP/2 header encoding"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0245",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.0 or later.",
"product_ids": [
"CSAFPID-0245",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-59980",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-59980"
}
]
},
{
"cve": "CVE-2026-61700",
"notes": [
{
"category": "description",
"text": "org.mariadb.jdbc/mariadb-java-client: MariaDB Connector/J: Information disclosure via server-initiated LOCAL INFILE requests"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0241",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.7.14, 3.3.5, 3.4.3, 3.5.9 or later.",
"product_ids": [
"CSAFPID-0241",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0241",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-61700",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-61700"
}
]
},
{
"cve": "CVE-2026-63209",
"notes": [
{
"category": "description",
"text": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0127",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.18.7 or later.",
"product_ids": [
"CSAFPID-0127",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0127",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-63209",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-63209"
}
]
},
{
"cve": "CVE-2026-63349",
"notes": [
{
"category": "description",
"text": "anyio: AnyIO: Privilege retention in child processes due to incorrect group handling"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0018",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.14.2 or later.",
"product_ids": [
"CSAFPID-0018",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0018",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-63349",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-63349"
}
]
},
{
"cve": "CVE-2026-63374",
"notes": [
{
"category": "description",
"text": "anyio: AnyIO: TLS certificate spoofing via improper internationalized domain name encoding"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.14.2 or later.",
"product_ids": [
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-63374",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-63374"
}
]
},
{
"cve": "CVE-2026-63430",
"notes": [
{
"category": "description",
"text": "mXSS in ammonia via MathML `annotation-xml` encoding strip"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0285",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.1.3 or later.",
"product_ids": [
"CSAFPID-0285",
"CSAFPID-0331"
]
}
],
"title": "RUSTSEC-2026-0193",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-63430"
}
]
},
{
"cve": "CVE-2026-6357",
"notes": [
{
"category": "description",
"text": "pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 26.1 or later.",
"product_ids": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-6357",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-6357"
}
]
},
{
"cve": "CVE-2026-6402",
"notes": [
{
"category": "description",
"text": "webpack-dev-server: webpack-dev-server: Information disclosure due to cross-origin source code exposure"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0186",
"CSAFPID-0211",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.2.4 or later.",
"product_ids": [
"CSAFPID-0186",
"CSAFPID-0211",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0186",
"CSAFPID-0211",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-6402",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-6402"
}
]
},
{
"cve": "CVE-2026-64847",
"notes": [
{
"category": "description",
"text": "anyio: AnyIO: Denial of Service due to undrained stderr in process-pool workers"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.14.2 or later.",
"product_ids": [
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-64847",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-64847"
}
]
},
{
"cve": "CVE-2026-65898",
"notes": [
{
"category": "description",
"text": "dompurify: DOMPurify: Cross-site scripting via permanent attribute allowlist pollution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.4.11 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-65898",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-65898"
}
]
},
{
"cve": "CVE-2026-65899",
"notes": [
{
"category": "description",
"text": "dompurify: DOMPurify: Client-side arbitrary code execution due to improper Trusted Types policy reset"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.4.9 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-65899",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-65899"
}
]
},
{
"cve": "CVE-2026-65901",
"notes": [
{
"category": "description",
"text": "dompurify: DOMPurify: Cross-site scripting vulnerability via attacker-controlled nodeName"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-65901",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-65901"
}
]
},
{
"cve": "CVE-2026-65902",
"notes": [
{
"category": "description",
"text": "dompurify: DOMPurify: Sanitization bypass via hook manipulation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.4.7 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-65902",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-65902"
}
]
},
{
"cve": "CVE-2026-65903",
"notes": [
{
"category": "description",
"text": "dompurify: DOMPurify: Security bypass allows injection of malicious content"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.4.0 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-65903",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-65903"
}
]
},
{
"cve": "CVE-2026-65912",
"notes": [
{
"category": "description",
"text": "dompurify: DOMPurify: URI validation bypass leads to cross-site scripting"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.3.2 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-65912",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-65912"
}
]
},
{
"cve": "CVE-2026-65913",
"notes": [
{
"category": "description",
"text": "dompurify: DOMPurify: Cross-Site Scripting (XSS) via prototype pollution in USE_PROFILES mode"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.3.2 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-65913",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-65913"
}
]
},
{
"cve": "CVE-2026-65914",
"notes": [
{
"category": "description",
"text": "dompurify: DOMPurify: Cross-Site Scripting vulnerability allows arbitrary code execution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.3.2 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-65914",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-65914"
}
]
},
{
"cve": "CVE-2026-66010",
"notes": [
{
"category": "description",
"text": "dompurify: DOMPurify: Cross-Site Scripting (XSS) via custom element attribute bypass"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.4.12 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-66010",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-66010"
}
]
},
{
"cve": "CVE-2026-68494",
"notes": [
{
"category": "description",
"text": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0128",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.18.8, 2.21.4 or later.",
"product_ids": [
"CSAFPID-0128",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0128",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-68494",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-68494"
}
]
},
{
"cve": "CVE-2026-68497",
"notes": [
{
"category": "description",
"text": "com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0116",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.18.10, 2.21.6, 2.22.2 or later.",
"product_ids": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-68497",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-68497"
}
]
},
{
"cve": "CVE-2026-6873",
"notes": [
{
"category": "description",
"text": "python-django: Django: Information disclosure via non-injective cookie salt derivation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0070",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.2.15, 6.0.6 or later.",
"product_ids": [
"CSAFPID-0070",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0070",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-6873",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-6873"
}
]
},
{
"cve": "CVE-2026-69152",
"notes": [
{
"category": "description",
"text": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.1.18, 2.1.4, 3.0.6, 5.0.9 or later.",
"product_ids": [
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-69152",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-69152"
}
]
},
{
"cve": "CVE-2026-69207",
"notes": [
{
"category": "description",
"text": "Hono: ReDoS in CORS middleware via Access-Control-Request-Headers"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.34 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-69207",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-69207"
}
]
},
{
"cve": "CVE-2026-69243",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.2 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-69243",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-69243"
}
]
},
{
"cve": "CVE-2026-69244",
"notes": [
{
"category": "description",
"text": "aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.3 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-69244",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-69244"
}
]
},
{
"cve": "CVE-2026-69247",
"notes": [
{
"category": "description",
"text": "python-cryptography: python-cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0076",
"CSAFPID-0129",
"CSAFPID-0130",
"CSAFPID-0131",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 50.0.0 or later.",
"product_ids": [
"CSAFPID-0076",
"CSAFPID-0129",
"CSAFPID-0130",
"CSAFPID-0131",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0076",
"CSAFPID-0129",
"CSAFPID-0130",
"CSAFPID-0131",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-69247",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-69247"
}
]
},
{
"cve": "CVE-2026-69248",
"notes": [
{
"category": "description",
"text": "python-cryptography: python-cryptography: python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0076",
"CSAFPID-0129",
"CSAFPID-0130",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 49.0.0 or later.",
"product_ids": [
"CSAFPID-0076",
"CSAFPID-0129",
"CSAFPID-0130",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0076",
"CSAFPID-0129",
"CSAFPID-0130",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-69248",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-69248"
}
]
},
{
"cve": "CVE-2026-69249",
"notes": [
{
"category": "description",
"text": "python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0076",
"CSAFPID-0129",
"CSAFPID-0130",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 49.0.0 or later.",
"product_ids": [
"CSAFPID-0076",
"CSAFPID-0129",
"CSAFPID-0130",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0076",
"CSAFPID-0129",
"CSAFPID-0130",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-69249",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-69249"
}
]
},
{
"cve": "CVE-2026-71554",
"notes": [
{
"category": "description",
"text": "h2: h2: Request smuggling due to duplicate Host headers"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0246",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.4.1 or later.",
"product_ids": [
"CSAFPID-0246",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0246",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-71554",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-71554"
}
]
},
{
"cve": "CVE-2026-71849",
"notes": [
{
"category": "description",
"text": "Hono: Proxy Helper does not remove response headers listed in the `Connection` header"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.34 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-71849",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-71849"
}
]
},
{
"cve": "CVE-2026-71850",
"notes": [
{
"category": "description",
"text": "Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.12.34 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-71850",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-71850"
}
]
},
{
"cve": "CVE-2026-7246",
"notes": [
{
"category": "description",
"text": "CVE-2026-7246 was reported by the analysis; the analyzer supplied no description."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 8.3.3 or later.",
"product_ids": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-7246",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-7246"
}
]
},
{
"cve": "CVE-2026-72816",
"notes": [
{
"category": "description",
"text": "chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-72816",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-72816"
}
]
},
{
"cve": "CVE-2026-72817",
"notes": [
{
"category": "description",
"text": "chi Middleware Vulnerable to Potential IP Spoofing via `X-Forwarded-For` Header in `Request.RemoteAddr` Resolution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-72817",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-72817"
}
]
},
{
"cve": "CVE-2026-73088",
"notes": [
{
"category": "description",
"text": "browserslist: Browserslist: Prototype pollution leading to denial of service"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0132",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.28.7 or later.",
"product_ids": [
"CSAFPID-0132",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0132",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-73088",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-73088"
}
]
},
{
"cve": "CVE-2026-73089",
"notes": [
{
"category": "description",
"text": "browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0132",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.28.7 or later.",
"product_ids": [
"CSAFPID-0132",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0132",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-73089",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-73089"
}
]
},
{
"cve": "CVE-2026-73228",
"notes": [
{
"category": "description",
"text": "djangorestframework: Django REST framework: Denial of Service via oversized request bodies"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0247",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.17.2 or later.",
"product_ids": [
"CSAFPID-0247",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0247",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-73228",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-73228"
}
]
},
{
"cve": "CVE-2026-73229",
"notes": [
{
"category": "description",
"text": "djangorestframework: Django REST framework: Information disclosure via improper permission checks in AdminRenderer"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0247",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.17.2 or later.",
"product_ids": [
"CSAFPID-0247",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0247",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-73229",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-73229"
}
]
},
{
"cve": "CVE-2026-73231",
"notes": [
{
"category": "description",
"text": "@faker-js/faker: Faker: Arbitrary Code Execution via attacker-controlled fake templates"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0133",
"CSAFPID-0134",
"CSAFPID-0135",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 10.5.0 or later.",
"product_ids": [
"CSAFPID-0133",
"CSAFPID-0134",
"CSAFPID-0135",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0133",
"CSAFPID-0134",
"CSAFPID-0135",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-73231",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-73231"
}
]
},
{
"cve": "CVE-2026-73566",
"notes": [
{
"category": "description",
"text": "tar: node-tar: Denial of Service via crafted long-path tar archive"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0014",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 7.5.21 or later.",
"product_ids": [
"CSAFPID-0014",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0014",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-73566",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-73566"
}
]
},
{
"cve": "CVE-2026-73569",
"notes": [
{
"category": "description",
"text": "fast-xml-parser: fast-xml-parser: Denial of Service via repeated DOCTYPE declarations"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0136",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.10.1 or later.",
"product_ids": [
"CSAFPID-0136",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0136",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-73569",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-73569"
}
]
},
{
"cve": "CVE-2026-75595",
"notes": [
{
"category": "description",
"text": "io.netty/netty-handler: Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0019",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.17.Final, 4.1.137.Final or later.",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0019",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-75595",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-75595"
}
]
},
{
"cve": "CVE-2026-75596",
"notes": [
{
"category": "description",
"text": "Netty is an asynchronous, event-driven network application framework. ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0019",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.2.17.Final, 4.1.137.Final or later.",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0019",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-75596",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-75596"
}
]
},
{
"cve": "CVE-2026-75838",
"notes": [
{
"category": "description",
"text": "DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.4.13 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "GHSA-55q2-fjhq-7xh7",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-75838"
}
]
},
{
"cve": "CVE-2026-76844",
"notes": [
{
"category": "description",
"text": "webpack-dev-middleware: webpack-dev-middleware: Information Disclosure via Path Traversal"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0137",
"CSAFPID-0138",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 8.3.0, 7.4.6 or later.",
"product_ids": [
"CSAFPID-0137",
"CSAFPID-0138",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0137",
"CSAFPID-0138",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-76844",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-76844"
}
]
},
{
"cve": "CVE-2026-77310",
"notes": [
{
"category": "description",
"text": "com.fasterxml.jackson.core/jackson-databind: jackson-databind: Server-Side Request Forgery and internal host enumeration via eager DNS resolution"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0116",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.18.9, 2.21.5, 2.22.1 or later.",
"product_ids": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-77310",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-77310"
}
]
},
{
"cve": "CVE-2026-78659",
"notes": [
{
"category": "description",
"text": "When \"Trailer\" headers are sent by a client, the HTTP server internall ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0139",
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.60.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0139",
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0139",
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-78659",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-78659"
}
]
},
{
"cve": "CVE-2026-78660",
"notes": [
{
"category": "description",
"text": "Historically, we have been rather lax about malformed framing-related ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0139",
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.60.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0139",
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0139",
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-78660",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-78660"
}
]
},
{
"cve": "CVE-2026-78662",
"notes": [
{
"category": "description",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0121",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.56.0 or later.",
"product_ids": [
"CSAFPID-0044",
"CSAFPID-0121",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0044",
"CSAFPID-0121",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-78662",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-78662"
}
]
},
{
"cve": "CVE-2026-78663",
"notes": [
{
"category": "description",
"text": "net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0139",
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.60.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0139",
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0139",
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-78663",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-78663"
}
]
},
{
"cve": "CVE-2026-78667",
"notes": [
{
"category": "description",
"text": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.26.9, 1.27.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-78667",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-78667"
}
]
},
{
"cve": "CVE-2026-78669",
"notes": [
{
"category": "description",
"text": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0139",
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.60.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0139",
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0139",
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-78669",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-78669"
}
]
},
{
"cve": "CVE-2026-79654",
"notes": [
{
"category": "description",
"text": "ketello: Katello Content View History API Cross-Organization Authorization Bypass"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0210"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to ~> 4.21.2, >= 5.0.1 or later.",
"product_ids": [
"CSAFPID-0210"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0210"
]
}
],
"title": "CVE-2026-79654"
},
{
"cve": "CVE-2026-82417",
"notes": [
{
"category": "description",
"text": "qs: qs: Denial of Service via improper validation in stringify function"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0248",
"CSAFPID-0249",
"CSAFPID-0250",
"CSAFPID-0251",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 6.16.0 or later.",
"product_ids": [
"CSAFPID-0248",
"CSAFPID-0249",
"CSAFPID-0250",
"CSAFPID-0251",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0248",
"CSAFPID-0249",
"CSAFPID-0250",
"CSAFPID-0251",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-82417",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-82417"
}
]
},
{
"cve": "CVE-2026-82562",
"notes": [
{
"category": "description",
"text": "qs: qs: Denial of Service via array limit bypass in query string parsing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0249",
"CSAFPID-0250",
"CSAFPID-0251",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 6.16.0 or later.",
"product_ids": [
"CSAFPID-0249",
"CSAFPID-0250",
"CSAFPID-0251",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0249",
"CSAFPID-0250",
"CSAFPID-0251",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-82562",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-82562"
}
]
},
{
"cve": "CVE-2026-83557",
"notes": [
{
"category": "description",
"text": "com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: Path traversal via incomplete type validation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0116",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.18.10, 2.21.6, 2.22.2 or later.",
"product_ids": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-83557",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-83557"
}
]
},
{
"cve": "CVE-2026-8404",
"notes": [
{
"category": "description",
"text": "Django: Django: Information disclosure due to improper handling of Cache-Control directives"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0070",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.2.15, 6.0.6 or later.",
"product_ids": [
"CSAFPID-0070",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0070",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-8404",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-8404"
}
]
},
{
"cve": "CVE-2026-84292",
"notes": [
{
"category": "description",
"text": "fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0140",
"CSAFPID-0141",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.4.6, 3.1.7, 4.1.4 or later.",
"product_ids": [
"CSAFPID-0140",
"CSAFPID-0141",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0140",
"CSAFPID-0141",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-84292",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-84292"
}
]
},
{
"cve": "CVE-2026-84303",
"notes": [
{
"category": "description",
"text": "gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0012",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.83.1 or later.",
"product_ids": [
"CSAFPID-0012",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0012",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-84303",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-84303"
}
]
},
{
"cve": "CVE-2026-84304",
"notes": [
{
"category": "description",
"text": "google.golang.org/grpc: gRPC-Go: Denial of Service via HTTP/2 DATA Frame Fragmentation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0012",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.83.1 or later.",
"product_ids": [
"CSAFPID-0012",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0012",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-84304",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-84304"
}
]
},
{
"cve": "CVE-2026-84363",
"notes": [
{
"category": "description",
"text": "Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.13.5 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-84363",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-84363"
}
]
},
{
"cve": "CVE-2026-84364",
"notes": [
{
"category": "description",
"text": "Hono: Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.13.5 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-84364",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-84364"
}
]
},
{
"cve": "CVE-2026-84365",
"notes": [
{
"category": "description",
"text": "Hono: Incomplete fix for CVE-2026-39408: `toSSG()` still writes files outside the output directory"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.13.5 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-84365",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-84365"
}
]
},
{
"cve": "CVE-2026-84367",
"notes": [
{
"category": "description",
"text": "joi: joi: Prototype pollution via dynamic key renaming"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0144",
"CSAFPID-0145",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 17.13.5, 18.2.4 or later.",
"product_ids": [
"CSAFPID-0144",
"CSAFPID-0145",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0144",
"CSAFPID-0145",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-84367",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-84367"
}
]
},
{
"cve": "CVE-2026-84368",
"notes": [
{
"category": "description",
"text": "joi: @hapi/joi: joi: Prototype pollution via untrusted input in schema configuration"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0144",
"CSAFPID-0145",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 17.13.6, 18.2.5 or later.",
"product_ids": [
"CSAFPID-0144",
"CSAFPID-0145",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0144",
"CSAFPID-0145",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-84368",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-84368"
}
]
},
{
"cve": "CVE-2026-84371",
"notes": [
{
"category": "description",
"text": "sanitize-html: stored XSS via SVG SMIL URI-list scheme-policy bypass"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0208",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.17.7 or later.",
"product_ids": [
"CSAFPID-0208",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0208",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-84371",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-84371"
}
]
},
{
"cve": "CVE-2026-84375",
"notes": [
{
"category": "description",
"text": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0123",
"CSAFPID-0124",
"CSAFPID-0125",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.3.2, 3.15.2 or later.",
"product_ids": [
"CSAFPID-0123",
"CSAFPID-0124",
"CSAFPID-0125",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0123",
"CSAFPID-0124",
"CSAFPID-0125",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-84375",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-84375"
}
]
},
{
"cve": "CVE-2026-84394",
"notes": [
{
"category": "description",
"text": "fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0140",
"CSAFPID-0141",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.4.6, 3.1.7, 4.1.4 or later.",
"product_ids": [
"CSAFPID-0140",
"CSAFPID-0141",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0140",
"CSAFPID-0141",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-84394",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-84394"
}
]
},
{
"cve": "CVE-2026-84445",
"notes": [
{
"category": "description",
"text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0012",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e or later.",
"product_ids": [
"CSAFPID-0012",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0012",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-84445",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-84445"
}
]
},
{
"cve": "CVE-2026-85062",
"notes": [
{
"category": "description",
"text": "colord: omgovich/colord: Colord: Denial of Service via oversized malformed color strings"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0252",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.9.4 or later.",
"product_ids": [
"CSAFPID-0252",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-85062",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-85062"
}
]
},
{
"cve": "CVE-2026-85393",
"notes": [
{
"category": "description",
"text": "node-forge: node-forge: Signature forgery vulnerability in RSA PKCS#1 v1.5 verification"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0041"
]
},
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0041"
]
}
],
"title": "CVE-2026-85393",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-85393"
}
]
},
{
"cve": "CVE-2026-85999",
"notes": [
{
"category": "description",
"text": "soupsieve: Soup Sieve: Denial of Service via crafted CSS selectors"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0113",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.9.0 or later.",
"product_ids": [
"CSAFPID-0113",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0113",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-85999",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-85999"
}
]
},
{
"cve": "CVE-2026-86000",
"notes": [
{
"category": "description",
"text": "soupsieve: Soup Sieve: Denial of Service via crafted CSS selectors"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0113",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.9.0 or later.",
"product_ids": [
"CSAFPID-0113",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0113",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-86000",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-86000"
}
]
},
{
"cve": "CVE-2026-8643",
"notes": [
{
"category": "description",
"text": "python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 26.1.2 or later.",
"product_ids": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0174",
"CSAFPID-0175",
"CSAFPID-0200",
"CSAFPID-0201",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-8643",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-8643"
}
]
},
{
"cve": "CVE-2026-86472",
"notes": [
{
"category": "description",
"text": "fast-uri: fast-uri: Security bypass due to inconsistent host case normalization"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0140",
"CSAFPID-0141",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.4.7, 3.1.8, 4.1.5 or later.",
"product_ids": [
"CSAFPID-0140",
"CSAFPID-0141",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0140",
"CSAFPID-0141",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-86472",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-86472"
}
]
},
{
"cve": "CVE-2026-86818",
"notes": [
{
"category": "description",
"text": "fast-uri: fast-uri: Mailto header injection via percent-encoded field-name desynchronization"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0141",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.1.5 or later.",
"product_ids": [
"CSAFPID-0141",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0141",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-86818",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-86818"
}
]
},
{
"cve": "CVE-2026-8723",
"notes": [
{
"category": "description",
"text": "qs: qs: Denial of Service due to improper handling of null/undefined array elements"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0248",
"CSAFPID-0249",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 6.15.2 or later.",
"product_ids": [
"CSAFPID-0248",
"CSAFPID-0249",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0248",
"CSAFPID-0249",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-8723",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-8723"
}
]
},
{
"cve": "CVE-2026-8763",
"notes": [
{
"category": "description",
"text": "org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: Bouncy Castle for Java: Name Constraints bypass via trailing dot in rfc822Name and URI"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0004",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.85 or later.",
"product_ids": [
"CSAFPID-0004",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0004",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-8763",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-8763"
}
]
},
{
"cve": "CVE-2026-87776",
"notes": [
{
"category": "description",
"text": "compression: compression: Denial of Service via memory leak on premature response close"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0142",
"CSAFPID-0143",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.8.2 or later.",
"product_ids": [
"CSAFPID-0142",
"CSAFPID-0143",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0142",
"CSAFPID-0143",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-87776",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-87776"
}
]
},
{
"cve": "CVE-2026-89407",
"notes": [
{
"category": "description",
"text": "com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0128",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.18.11, 2.21.7, 2.22.3 or later.",
"product_ids": [
"CSAFPID-0128",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0128",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-89407",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-89407"
}
]
},
{
"cve": "CVE-2026-89425",
"notes": [
{
"category": "description",
"text": "com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0128",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.21.7, 2.22.3, 2.18.11 or later.",
"product_ids": [
"CSAFPID-0128",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0128",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-89425",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-89425"
}
]
},
{
"cve": "CVE-2026-90711",
"notes": [
{
"category": "description",
"text": "proxy-addr: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0020",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.0.8 or later.",
"product_ids": [
"CSAFPID-0020",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0020",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-90711",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-90711"
}
]
},
{
"cve": "CVE-2026-9073",
"notes": [
{
"category": "description",
"text": "foreman-mcp-server: MCP Server: Insecure Sensitive HTTP Header Sanitization"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0253",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0253",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-9073",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-9073"
}
]
},
{
"cve": "CVE-2026-90771",
"notes": [
{
"category": "description",
"text": "joi: joi: Prototype Pollution via custom messages"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0144",
"CSAFPID-0145",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 17.13.8, 18.2.9 or later.",
"product_ids": [
"CSAFPID-0144",
"CSAFPID-0145",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0144",
"CSAFPID-0145",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-90771",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-90771"
}
]
},
{
"cve": "CVE-2026-91776",
"notes": [
{
"category": "description",
"text": "jackson-databind: com.fasterxml.jackson/jackson-core: jackson-databind: Denial of Service via unbounded cache growth in TypeDeserializerBase"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0116",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.18.11, 2.21.7, 2.22.3 or later.",
"product_ids": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-91776",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-91776"
}
]
},
{
"cve": "CVE-2026-91777",
"notes": [
{
"category": "description",
"text": "com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0116",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.21.7, 2.18.11, 2.22.3 or later.",
"product_ids": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0116",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-91777",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-91777"
}
]
},
{
"cve": "CVE-2026-92599",
"notes": [
{
"category": "description",
"text": "joi: joi: Denial of Service via `isoDate` validation regular expression"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0144",
"CSAFPID-0145",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 17.13.7, 18.2.6 or later.",
"product_ids": [
"CSAFPID-0144",
"CSAFPID-0145",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0144",
"CSAFPID-0145",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-92599",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-92599"
}
]
},
{
"cve": "CVE-2026-9277",
"notes": [
{
"category": "description",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.8.4 or later.",
"product_ids": [
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-9277",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-9277"
}
]
},
{
"cve": "CVE-2026-9358",
"notes": [
{
"category": "description",
"text": "postcss-selector-parser: Postcss: Denial of Service via uncontrolled recursion in AST Serialization"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0204",
"CSAFPID-0205",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 6.1.3, 7.1.3 or later.",
"product_ids": [
"CSAFPID-0204",
"CSAFPID-0205",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0204",
"CSAFPID-0205",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-9358",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-9358"
}
]
},
{
"cve": "CVE-2026-93599",
"notes": [
{
"category": "description",
"text": "rustls-webpki: Denial of service via panic on malformed CRL BIT STRING"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0165",
"CSAFPID-0166",
"CSAFPID-0167",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.103.13, 0.104.0-alpha.7 or later.",
"product_ids": [
"CSAFPID-0165",
"CSAFPID-0166",
"CSAFPID-0167",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0165",
"CSAFPID-0166",
"CSAFPID-0167",
"CSAFPID-0331"
]
}
],
"title": "GHSA-82j2-j2ch-gfr8",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-93599"
}
]
},
{
"cve": "CVE-2026-93600",
"notes": [
{
"category": "description",
"text": "webpki: Name constraints for URI names were incorrectly accepted"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0165",
"CSAFPID-0166",
"CSAFPID-0167",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.103.12, 0.104.0-alpha.6 or later.",
"product_ids": [
"CSAFPID-0165",
"CSAFPID-0166",
"CSAFPID-0167",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 2.2,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0165",
"CSAFPID-0166",
"CSAFPID-0167",
"CSAFPID-0331"
]
}
],
"title": "GHSA-965h-392x-2mh5",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-93600"
}
]
},
{
"cve": "CVE-2026-93601",
"notes": [
{
"category": "description",
"text": "webpki: Name constraints were accepted for certificates asserting a wildcard name"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0165",
"CSAFPID-0166",
"CSAFPID-0167",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.103.12, 0.104.0-alpha.6 or later.",
"product_ids": [
"CSAFPID-0165",
"CSAFPID-0166",
"CSAFPID-0167",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 2.2,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0165",
"CSAFPID-0166",
"CSAFPID-0167",
"CSAFPID-0331"
]
}
],
"title": "GHSA-xgp8-3hg3-c2mh",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-93601"
}
]
},
{
"cve": "CVE-2026-93602",
"notes": [
{
"category": "description",
"text": "webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0165",
"CSAFPID-0166",
"CSAFPID-0167",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.103.10, 0.104.0-alpha.5 or later.",
"product_ids": [
"CSAFPID-0165",
"CSAFPID-0166",
"CSAFPID-0167",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0165",
"CSAFPID-0166",
"CSAFPID-0167",
"CSAFPID-0331"
]
}
],
"title": "GHSA-pwjx-qhcg-rvj4",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-93602"
}
]
},
{
"cve": "CVE-2026-93687",
"notes": [
{
"category": "description",
"text": "braces: braces: Denial of Service via Stack Overflow from Deeply Nested Patterns"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0146",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0146",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-93687",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-93687"
}
]
},
{
"cve": "CVE-2026-93748",
"notes": [
{
"category": "description",
"text": "http-cache-semantics: http-cache-semantics: Information Disclosure via max-stale directive"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0147",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0147",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-93748",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-93748"
}
]
},
{
"cve": "CVE-2026-93749",
"notes": [
{
"category": "description",
"text": "source-map-js: source-map-js: Denial of Service via malformed indexed source maps"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0148",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.2.2 or later.",
"product_ids": [
"CSAFPID-0148",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0148",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-93749",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-93749"
}
]
},
{
"cve": "CVE-2026-93981",
"notes": [
{
"category": "description",
"text": "hono: hono/jsx: Cross-Site Scripting via Unescaped Strings"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0084",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.13.7 or later.",
"product_ids": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0084",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-93981",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-93981"
}
]
},
{
"cve": "CVE-2026-94439",
"notes": [
{
"category": "description",
"text": "net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.26.9, 1.27.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-94439",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-94439"
}
]
},
{
"cve": "CVE-2026-94440",
"notes": [
{
"category": "description",
"text": "Parsing a multipart form can bypass memory limits and read an arbitrar ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.26.9, 1.27.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-94440",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-94440"
}
]
},
{
"cve": "CVE-2026-94448",
"notes": [
{
"category": "description",
"text": "html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.26.9, 1.27.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-94448",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-94448"
}
]
},
{
"cve": "CVE-2026-9496",
"notes": [
{
"category": "description",
"text": "pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0149",
"CSAFPID-0150",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 21.5.1 or later.",
"product_ids": [
"CSAFPID-0149",
"CSAFPID-0150",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0149",
"CSAFPID-0150",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-9496",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-9496"
}
]
},
{
"cve": "CVE-2026-9595",
"notes": [
{
"category": "description",
"text": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0186",
"CSAFPID-0211",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.2.5 or later.",
"product_ids": [
"CSAFPID-0186",
"CSAFPID-0211",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0186",
"CSAFPID-0211",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-9595",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-9595"
}
]
},
{
"cve": "CVE-2026-97030",
"notes": [
{
"category": "description",
"text": "A trusted template author may have previously written a valid template ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.26.9, 1.27.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-97030",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-97030"
}
]
},
{
"cve": "CVE-2026-97031",
"notes": [
{
"category": "description",
"text": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.26.9, 1.27.2 or later.",
"product_ids": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-97031",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-97031"
}
]
},
{
"cve": "CVE-2026-97032",
"notes": [
{
"category": "description",
"text": "net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0139",
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.60.0 or later.",
"product_ids": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0139",
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0035",
"CSAFPID-0075",
"CSAFPID-0139",
"CSAFPID-0064",
"CSAFPID-0065",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-97032",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-97032"
}
]
},
{
"cve": "CVE-2026-9704",
"notes": [
{
"category": "description",
"text": "keycloak: Keycloak: Privilege escalation due to oversized subject_token JWT"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0077",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 26.6.3 or later.",
"product_ids": [
"CSAFPID-0077",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0077",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-9704",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-9704"
}
]
},
{
"cve": "CVE-2026-97058",
"notes": [
{
"category": "description",
"text": "sprintf-js vulnerable to denial of service through unbounded precision specifiers"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0293",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0293",
"CSAFPID-0331"
]
}
],
"title": "GHSA-hp3w-g68c-fv3c",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-97058"
}
]
},
{
"cve": "CVE-2026-97687",
"notes": [
{
"category": "description",
"text": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0034",
"CSAFPID-0099",
"CSAFPID-0151",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.8.0 or later.",
"product_ids": [
"CSAFPID-0034",
"CSAFPID-0099",
"CSAFPID-0151",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0034",
"CSAFPID-0099",
"CSAFPID-0151",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-97687",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-97687"
}
]
},
{
"cve": "CVE-2026-97688",
"notes": [
{
"category": "description",
"text": "urllib3: urllib3: Denial of Service via infinite loop during chunked Deflate decoding"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0099",
"CSAFPID-0151",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.8.0 or later.",
"product_ids": [
"CSAFPID-0099",
"CSAFPID-0151",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
}
},
"products": [
"CSAFPID-0099",
"CSAFPID-0151",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-97688",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-97688"
}
]
},
{
"cve": "CVE-2026-97689",
"notes": [
{
"category": "description",
"text": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0034",
"CSAFPID-0099",
"CSAFPID-0151",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.8.0 or later.",
"product_ids": [
"CSAFPID-0034",
"CSAFPID-0099",
"CSAFPID-0151",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0034",
"CSAFPID-0099",
"CSAFPID-0151",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-97689",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-97689"
}
]
},
{
"cve": "CVE-2026-9791",
"notes": [
{
"category": "description",
"text": "keycloak-rhel9: Organization Data Leak After Feature Disabled in Keycloak"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0077",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 26.6.3 or later.",
"product_ids": [
"CSAFPID-0077",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0077",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-9791",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-9791"
}
]
},
{
"cve": "CVE-2026-9828",
"notes": [
{
"category": "description",
"text": "Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ..."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0183",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.5.33 or later.",
"product_ids": [
"CSAFPID-0183",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {},
"products": [
"CSAFPID-0183",
"CSAFPID-0331"
]
}
],
"title": "CVE-2026-9828",
"references": [
{
"category": "external",
"summary": "EPSS / KEV / nuclei enrichment source",
"url": "https://vulnlookup.ndaal.eu:443/api/v1/vulnerability/CVE-2026-9828"
}
]
},
{
"notes": [
{
"category": "description",
"text": "markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0063",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 15.0.1, 14.3.1 or later.",
"product_ids": [
"CSAFPID-0063",
"CSAFPID-0331"
]
}
],
"title": "GHSA-253c-mchw-3w2r"
},
{
"notes": [
{
"category": "description",
"text": "aiohttp: Multiple instances of excessive or unbounded memory/CPU use"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.14.4 or later.",
"product_ids": [
"CSAFPID-0060",
"CSAFPID-0061",
"CSAFPID-0331"
]
}
],
"title": "GHSA-2g87-pp6c-29x5"
},
{
"notes": [
{
"category": "description",
"text": "Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0254",
"CSAFPID-0255",
"CSAFPID-0256",
"CSAFPID-0257",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.23.45 or later.",
"product_ids": [
"CSAFPID-0254",
"CSAFPID-0255",
"CSAFPID-0256",
"CSAFPID-0257",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0254",
"CSAFPID-0255",
"CSAFPID-0256",
"CSAFPID-0257",
"CSAFPID-0331"
]
}
],
"title": "GHSA-2mjx-qc3c-rqvc"
},
{
"notes": [
{
"category": "description",
"text": "PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0152",
"CSAFPID-0153",
"CSAFPID-0154",
"CSAFPID-0155",
"CSAFPID-0156",
"CSAFPID-0157",
"CSAFPID-0158",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.29.0 or later.",
"product_ids": [
"CSAFPID-0152",
"CSAFPID-0153",
"CSAFPID-0154",
"CSAFPID-0155",
"CSAFPID-0156",
"CSAFPID-0157",
"CSAFPID-0158",
"CSAFPID-0331"
]
}
],
"title": "GHSA-36hh-v3qg-5jq4"
},
{
"notes": [
{
"category": "description",
"text": "d3-color vulnerable to ReDoS"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0159",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.1.0 or later.",
"product_ids": [
"CSAFPID-0159",
"CSAFPID-0331"
]
}
],
"title": "GHSA-36jr-mh4h-2g58"
},
{
"notes": [
{
"category": "description",
"text": "tar has a PAX header desynchronization issue"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0220",
"CSAFPID-0221",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.4.46 or later.",
"product_ids": [
"CSAFPID-0220",
"CSAFPID-0221",
"CSAFPID-0331"
]
}
],
"title": "GHSA-3pv8-6f4r-ffg2"
},
{
"notes": [
{
"category": "description",
"text": "Sensitive Data Exposure in sequelize-cli"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "GHSA-3xc7-xg67-pw99"
},
{
"notes": [
{
"category": "description",
"text": "Command Injection in dot"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "GHSA-4859-gpc7-4j66"
},
{
"notes": [
{
"category": "description",
"text": "Vulnerable OpenSSL included in cryptography wheels"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0076",
"CSAFPID-0129",
"CSAFPID-0130",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 48.0.1 or later.",
"product_ids": [
"CSAFPID-0076",
"CSAFPID-0129",
"CSAFPID-0130",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0076",
"CSAFPID-0129",
"CSAFPID-0130",
"CSAFPID-0331"
]
}
],
"title": "GHSA-537c-gmf6-5ccf"
},
{
"notes": [
{
"category": "description",
"text": "Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0160",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 7.0.3 or later.",
"product_ids": [
"CSAFPID-0160",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0160",
"CSAFPID-0331"
]
}
],
"title": "GHSA-5c6j-r48x-rmvq"
},
{
"notes": [
{
"category": "description",
"text": "JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0123",
"CSAFPID-0124",
"CSAFPID-0125",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.3.1, 3.15.1 or later.",
"product_ids": [
"CSAFPID-0123",
"CSAFPID-0124",
"CSAFPID-0125",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
},
"products": [
"CSAFPID-0123",
"CSAFPID-0124",
"CSAFPID-0125",
"CSAFPID-0331"
]
}
],
"title": "GHSA-5p4m-2wfm-xmqj"
},
{
"notes": [
{
"category": "description",
"text": "certifi bundles emSign root CAs with compromised intermediate CA keys"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2026.10.19 or later.",
"product_ids": [
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0331"
]
}
],
"title": "GHSA-6q48-6c7w-9gw2"
},
{
"notes": [
{
"category": "description",
"text": "owning_ref vulnerable to multiple soundness issues"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0258",
"CSAFPID-0331"
]
},
"title": "GHSA-9qxh-258v-666c"
},
{
"notes": [
{
"category": "description",
"text": "Regular Expression Denial of Service in marked"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0030",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.7.0 or later.",
"product_ids": [
"CSAFPID-0030",
"CSAFPID-0331"
]
}
],
"title": "GHSA-ch52-vgq2-943f"
},
{
"notes": [
{
"category": "description",
"text": "PyO3 has a missing `Sync` bound on `PyCFunction::new_closure` closures"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0152",
"CSAFPID-0153",
"CSAFPID-0154",
"CSAFPID-0155",
"CSAFPID-0156",
"CSAFPID-0157",
"CSAFPID-0158",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.29.0 or later.",
"product_ids": [
"CSAFPID-0152",
"CSAFPID-0153",
"CSAFPID-0154",
"CSAFPID-0155",
"CSAFPID-0156",
"CSAFPID-0157",
"CSAFPID-0158",
"CSAFPID-0331"
]
}
],
"title": "GHSA-chgr-c6px-7xpp"
},
{
"notes": [
{
"category": "description",
"text": "Rand is unsound with a custom logger using rand::rng()"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0279",
"CSAFPID-0280",
"CSAFPID-0281",
"CSAFPID-0282",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.9.3, 0.10.1, 0.8.6 or later.",
"product_ids": [
"CSAFPID-0279",
"CSAFPID-0280",
"CSAFPID-0281",
"CSAFPID-0282",
"CSAFPID-0331"
]
}
],
"title": "GHSA-cq8v-f236-94qc"
},
{
"notes": [
{
"category": "description",
"text": "Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0085",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.0.5, 1.19.15 or later.",
"product_ids": [
"CSAFPID-0085",
"CSAFPID-0331"
]
}
],
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0085",
"CSAFPID-0331"
]
}
],
"title": "GHSA-frvp-7c67-39w9"
},
{
"notes": [
{
"category": "description",
"text": "atty potential unaligned read"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0283",
"CSAFPID-0331"
]
},
"title": "GHSA-g98v-hv3f-hcfr"
},
{
"notes": [
{
"category": "description",
"text": "gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0012",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.82.1 or later.",
"product_ids": [
"CSAFPID-0012",
"CSAFPID-0331"
]
}
],
"title": "GHSA-hrxh-6v49-42gf"
},
{
"notes": [
{
"category": "description",
"text": "JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0284",
"CSAFPID-0331"
]
},
"metrics": [
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
}
},
"products": [
"CSAFPID-0284",
"CSAFPID-0331"
]
}
],
"title": "GHSA-j965-2qgj-vjmq"
},
{
"notes": [
{
"category": "description",
"text": "fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0259",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.1.0, 3.1.0, 2.2.0 or later.",
"product_ids": [
"CSAFPID-0259",
"CSAFPID-0331"
]
}
],
"title": "GHSA-jggr-w7fw-pc2j"
},
{
"notes": [
{
"category": "description",
"text": "Cross-Site Scripting in dompurify"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0003",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 2.0.7 or later.",
"product_ids": [
"CSAFPID-0003",
"CSAFPID-0331"
]
}
],
"title": "GHSA-mjjq-c88q-qhr6"
},
{
"notes": [
{
"category": "description",
"text": "Ammonia incorrectly handles embedded SVG and MathML leading to mutation XSS after removal"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0285",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.1.2, 4.0.1, 3.3.1 or later.",
"product_ids": [
"CSAFPID-0285",
"CSAFPID-0331"
]
}
],
"title": "GHSA-mm7x-qfjj-5g2c"
},
{
"notes": [
{
"category": "description",
"text": "humanfs: Recursive copy follows symlinked files and copies data from outside the source tree"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0260",
"CSAFPID-0261",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.16.8 or later.",
"product_ids": [
"CSAFPID-0260",
"CSAFPID-0261",
"CSAFPID-0331"
]
}
],
"title": "GHSA-p498-v437-472g"
},
{
"notes": [
{
"category": "description",
"text": "PyO3 Risk of buffer overflow in `PyString::from_object`"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0152",
"CSAFPID-0153",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.24.1 or later.",
"product_ids": [
"CSAFPID-0152",
"CSAFPID-0153",
"CSAFPID-0331"
]
}
],
"title": "GHSA-pph8-gcv7-4qj5"
},
{
"notes": [
{
"category": "description",
"text": "@eslint/plugin-kit is vulnerable to Regular Expression Denial of Service attacks through ConfigCommentParser"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0286",
"CSAFPID-0287",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.3.4 or later.",
"product_ids": [
"CSAFPID-0286",
"CSAFPID-0287",
"CSAFPID-0331"
]
}
],
"title": "GHSA-xffm-g5w8-qvg7"
},
{
"notes": [
{
"category": "description",
"text": "The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0044",
"CSAFPID-0121",
"CSAFPID-0331"
]
},
"title": "GO-2026-5932"
},
{
"notes": [
{
"category": "description",
"text": "Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2 transport server implementation in google.golang.org/grpc"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0012",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.82.1 or later.",
"product_ids": [
"CSAFPID-0012",
"CSAFPID-0331"
]
}
],
"title": "GO-2026-6061"
},
{
"notes": [
{
"category": "description",
"text": "certifi bundles emSign root CAs with compromised intermediate CA keys"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0331"
]
},
"title": "PYSEC-2026-4320"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: Red Hat Satellite 6.2 Capsule and Server"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2016:1501"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: Satellite 6.2.1 bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2016:1615"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: openssl bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2017:1929"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: Red Hat OpenShift Container Platform 3.9 RPM Release Advisory"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2018:0489"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: OpenShift Container Platform 3.10 RPM Release Advisory"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2018:1816"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: CloudForms 4.7.1 bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2019:0453"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: Satellite 6.6.2 Async Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2020:0496"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: Satellite 6.7.2 Async Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2020:3255"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: Satellite 6.7.3 Async Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2020:3614"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: new packages: vim"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2022:3945"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: Satellite 6.15.2 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2024:4589"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: libxml2 and libxslt bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2025:12345"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: python3.12 bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2025:6294"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: openssl bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2025:6314"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: rsync bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2025:6470"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: libxml2 bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2025:6597"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Bug Fix Advisory: Important: Satellite 6.19.0 new version release"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHBA-2026:14131"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Enhancement Advisory: nodejs:12 enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHEA-2020:0330"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Enhancement Advisory: nodejs:12 bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHEA-2022:4925"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Enhancement Advisory: nodejs:12 bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHEA-2022:5139"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Enhancement Advisory: nodejs:12 bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHEA-2022:5221"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Enhancement Advisory: nodejs:12 bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHEA-2022:5615"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Enhancement Advisory: nginx:1.22 bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHEA-2023:6562"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2004:180"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2004:249"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2004:402"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2005:010"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2005:036"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2005:122"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2005:745"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2006:0205"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: shadow-utils security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2007:0276"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2007:0346"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2007:0356"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: shadow-utils security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2007:0431"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: tar security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2007:0860"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2007:0992"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2008:0580"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2008:0617"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2008:0618"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2009:0333"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2009:0340"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: tar security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2010:0141"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2010:0534"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2011:0376"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2011:0558"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2011:1103"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2011:1104"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2011:1105"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2011:1132"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2011:1424"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2012:0317"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2012:0407"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2012:0523"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2012:1261"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Ruby on Rails security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2013:0153"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: rubygem-activesupport security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2013:0202"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2013:0685"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2014:0679"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2014:1052"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2014:1652"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Satellite 5.7.0 General Availability"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2015:0033"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2015:0066"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2015:0716"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Enterprise Linux OpenStack Platform Installer update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2015:0791"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2015:1072"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2015:1115"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Satellite 6.1.1 on RHEL 7"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2015:1591"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Satellite 6.1.1 on RHEL 6"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2015:1592"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ceph Storage 1.3.1 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2015:2066"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2015:2594"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2015:2596"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2015:2617"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.1.5 bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2015:2622"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2016:0008"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2016:0301"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2016:0305"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2016:0722"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2016:1940"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2016:2972"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2017:0286"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: CFME 5.8.0 security, bug, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2017:1367"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat OpenShift Container Platform 3.7 security, bug, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2017:3188"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Satellite 6 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2018:0273"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.3 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2018:0336"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat CloudForms security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2018:0380"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2018:0998"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat OpenShift Application Runtimes Node.js 8.11.4 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2018:2552"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat OpenShift Application Runtimes Node.js 10.9.0 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2018:2553"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.4 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2018:2927"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2018:3221"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:0109"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: CloudForms 4.7 security, bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:0212"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:0483"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.5 Release"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:1222"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:1619"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:1726"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:1774"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:1790"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:1793"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:1942"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:1947"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:2304"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:2400"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.14 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:2799"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:2868"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:2870"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:10 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:2925"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Satellite 6 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:3172"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:3700"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2019:3707"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:10 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:0573"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:10 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:0579"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:0598"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:1293"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:10 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:1317"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:10 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:1343"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.7 release."
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:1454"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:1840"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:2847"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:10 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:2848"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:10 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:2849"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:2852"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:2894"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:3014"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:10 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:3042"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:3044"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:3298"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:3901"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:4032"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:12 security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:4272"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.8 release"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:4366"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:4453"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:4514"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:12 security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:4903"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:5422"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:5476"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.16 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:5495"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:12 security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:5499"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:5566"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:5588"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:5623"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:5637"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:5639"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:5640"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:5641"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2020:5642"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:0343"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:10 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:0548"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:0549"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:14 security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:0551"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:0557"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:0734"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:10 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:0735"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:10 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:0738"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:0739"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:0740"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:10 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:0741"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:14 security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:0744"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:0883"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:1024"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:1032"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:1063"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:1131"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:1266"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.9 Release"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:1313"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:1678"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:2184"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:2259"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.16 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:2290"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:2792"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:12 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:3073"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:3074"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:12 security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:3623"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:12 security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:3638"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:12 security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:3639"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:14 security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:3666"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:3798"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:4424"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:4517"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:5171"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2021:5226"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:0064"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:0246"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:0323"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:0350"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:0366"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:0894"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:1065"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:1066"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:1071"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:1076"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:1077"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:1078"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:1082"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:1091"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:1112"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:1552"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:4796"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:5242"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:5319"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:5813"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:5818"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:5942"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:6224"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:14 security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:6448"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:6449"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs and nodejs-nodemon security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:6595"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:6963"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:6964"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:14 security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:6985"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:7288"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:7821"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:14 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:7830"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:8812"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:8832"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:8833"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:8977"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2022:9073"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:0050"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:0096"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs and nodejs-nodemon security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:0321"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:0335"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: tar security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:0842"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:0946"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:0958"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: tar security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:0959"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.11.5 Async Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:1151"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:1199"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:1335"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:1405"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:1437"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:1439"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:1440"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:1441"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:1533"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:1582"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:1583"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:1742"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:1743"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.13 Release"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:2097"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:2523"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:2654"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs and nodejs-nodemon security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:2655"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:3408"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:3577"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:3586"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:3722"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:4033"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:4034"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:4035"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:4036"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:4330"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:4331"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:4498"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:4536"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:4537"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:4569"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5009"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dmidecode security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5061"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5193"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dmidecode security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5252"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5360"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5361"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5362"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5363"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5532"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5533"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: tar security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5610"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5711"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5712"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5713"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5714"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5715"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5764"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5765"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5803"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5849"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5850"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:5869"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:6120"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:6158"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: shadow-utils security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:6632"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gmp security and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:6661"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: shadow-utils security and bug fix update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:7112"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:7205"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.14.1 Async Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:7851"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2023:7877"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:0154"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:0208"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:0310"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: shadow-utils security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:0417"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:0500"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gmp security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:1102"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gmp update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:1412"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:1424"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:1438"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:1444"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:1503"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:1510"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:1678"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:1687"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:1688"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:1880"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:1932"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:2228"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl and openssl-fips-provider security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:2447"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: shadow-utils security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:2577"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:2651"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:2778"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:2779"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:2780"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:2793"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:2853"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:2910"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:2937"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl:5.32 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:3128"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gmp security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:3214"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:3544"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:3545"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs : security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:3553"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:3781"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:16 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:4353"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:4559"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:4721"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:4824"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:5136"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:5814"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:5815"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:6147"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:6148"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.15.3.1 Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:6335"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.14.4.2 Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:6336"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.13.7.2 Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:6337"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:6765"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:6783"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:7846"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:7847"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:7848"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.16.0 release"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:8906"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl and openssl-fips-provider security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:9333"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2024:9405"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:10140"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxml2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:10630"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glib2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:10855"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glibc security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:11066"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:11545"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:11802"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:11803"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:11804"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:11805"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: icu security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:11888"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: sqlite security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:11933"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:12056"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: jq security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:12882"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glibc security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:13240"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:1330"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxml2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:13429"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:1351"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python-requests security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:13604"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libarchive security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:14137"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:1443"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:1446"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:14984"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:1522"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:1582"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:1611"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:1613"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:17644"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:17715"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:17742"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:17913"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libtiff security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:19156"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: expat security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:19403"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssh security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:20126"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: shadow-utils security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:20145"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: binutils security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:20155"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: pam security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:20181"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: shadow-utils security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:20559"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:20945"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libtiff security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:20998"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:21015"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: expat security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:21030"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:21174"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:21248"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:21255"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:21562"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: pam security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:22019"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:22794"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: binutils security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:23306"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: binutils security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:23405"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssh security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:23479"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:23940"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.16.3 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:2399"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:3261"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:3262"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:3666"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:4459"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:4461"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7331"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7402"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7426"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7433"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7440"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxslt security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7496"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7500"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7502"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libarchive security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7510"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: expat security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7512"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: sqlite security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7517"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: xz security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7524"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7537"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7542"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7546"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7548"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7549"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:7619"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:8467"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:8468"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:8493"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:8506"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:8514"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:8902"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: krb5 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:9418"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libarchive security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:9420"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python-setuptools security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2025:9940"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: tar security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0002"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: brotli security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0008"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: tar security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0067"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0079"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: tar security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0135"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0210"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0211"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0212"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0216"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0234"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0237"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0238"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0241"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0251"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0313"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0321"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0322"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0323"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0337"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0353"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: tar security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0434"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: tar security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0435"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpq security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0594"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0602"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gnupg2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0697"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0714"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl and openssl-fips-provider security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0794"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: brotli security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0845"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpq security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0865"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0887"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glib2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:0975"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:10118"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:10711"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python-urllib3 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1086"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:10995"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:11004"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:11015"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:11324"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:11342"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:11389"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:11503"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:11509"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:11510"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:12220"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libtiff security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:12265"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libcap security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:12423"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:12740"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:12916"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glib2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1327"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:13274"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glibc security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1334"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssh security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:13380"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1349"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:13508"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:13512"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:13634"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: systemd security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:13651"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:13680"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:13719"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:13722"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:13839"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:14217"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1472"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1473"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1475"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: curl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1477"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:14790"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:14791"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:14836"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1496"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1503"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1519"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1594"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:15942"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:15943"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:15945"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.26 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:15966"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glib2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:15969"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gnupg2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1629"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: jq security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:16692"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:16699"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:16736"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: util-linux security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1696"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1720"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python-urllib3 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1726"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1733"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:17417"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:17524"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:17567"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:17603"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:17642"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:17685"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:17751"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:17752"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.26 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:17753"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:17790"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:17791"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:17792"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:17793"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:17794"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:18028"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:18029"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: jq security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:18040"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:18041"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:18063"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:18064"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glibc security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:18139"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: p11-kit security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:18143"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: systemd security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:18153"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: curl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1825"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1828"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:1843"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: delve security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19013"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glibc security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19061"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19064"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19066"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: systemd security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19068"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssh security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19069"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19073"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19106"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libcap security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19130"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: krb5 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19145"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glib2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19148"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libtiff security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19150"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: jq security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19151"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: rsync security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19152"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19159"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19218"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19224"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19371"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.26 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19372"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19374"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libcap security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19456"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glib2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19567"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libtiff security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:19586"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:20351"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:20356"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:20548"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:20549"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:20550"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:20551"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glibc security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:20594"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gnutls security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:20613"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: rsync security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:20696"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:21333"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:22312"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:22314"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.19.1 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:22326"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:2233"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: expat security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:22715"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:22878"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:22934"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:22952"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: delve security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:23102"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:23423"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:24009"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:2420"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:2421"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:2422"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:24761"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:24762"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:25237"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:25239"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:25503"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:25520"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: systemd security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:25900"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: postgresql:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:26204"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:26275"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: rsync security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:26332"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: ncurses security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:26357"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:26573"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.16.9 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:27076"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gnupg2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:2719"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:27197"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gnupg2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:2753"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:2767"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:2768"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpq security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:27738"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl-fips-provider security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:27745"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl-fips-provider security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:27746"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:2781"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:2782"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:2783"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python-urllib3 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28000"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28049"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28050"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28133"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28209"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28210"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28212"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28233"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxml2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28234"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libtasn1 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28235"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libsolv security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28236"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libtasn1 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28253"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxml2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28254"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28255"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28491"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28553"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxslt security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28584"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:2864"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: coreutils security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28911"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28921"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:28973"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:2899"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:29009"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:29017"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.26 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:29151"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxslt security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:29809"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxslt security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:29814"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:29874"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:29898"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:29900"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:29901"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:29902"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:29986"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:30267"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:30268"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:30333"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:30349"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:30354"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:3042"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:30647"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:30649"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl:5.32 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:30851"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:30900"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:32980"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glibc security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:33092"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: coreutils security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:33124"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glibc security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:33170"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glibc security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:33226"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:33388"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:33453"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:33507"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:33527"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxml2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:33635"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:3364"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:33771"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:33840"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:33885"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:3405"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:34160"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:34351"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.19.2 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:34365"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.17.9 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:34366"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.18.7 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:34368"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:3437"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:34476"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:34477"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:34889"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:34890"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:34924"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:34975"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:35016"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:35387"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:35454"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:3551"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:3573"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:3574"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:3575"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:3576"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:3577"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:35807"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:35813"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs22 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:35842"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:35891"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:35892"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:36331"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:36364"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:3638"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:36618"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.26 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:36639"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:36759"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:36841"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl:5.32 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:37070"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:37382"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:37469"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:37530"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:37764"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:38017"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:38018"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:38187"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:38279"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:38342"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:38503"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:38804"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:38805"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:38847"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:38995"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:39022"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:39023"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:39183"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:39246"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxml2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:39304"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libsolv security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:39315"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxml2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:39317"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:3958"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:3959"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:39771"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:39868"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:39985"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:39997"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:40041"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:40485"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:40486"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:40724"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:41176"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:41240"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:41276"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:4163"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libtiff security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:41892"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:41947"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glib2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:42063"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:42078"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.16.11 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:42082"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glib2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:42089"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:42125"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:4214"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.17.9.1 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:42150"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.18.7.1 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:42151"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.19.2.1 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:42240"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:42329"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.26 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:4235"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glibc security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:42694"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: acl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:42736"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: acl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:42739"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:42923"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glibc security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:42952"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: acl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:43420"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:43513"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:43818"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpq security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:44308"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpq security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:44391"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:44416"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:4442"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:45327"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:45341"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:45779"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:46012"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:46016"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:46515"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:4705"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:47057"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:47058"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:47059"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:47060"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:47072"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:4713"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:4715"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:47171"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:4728"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:4729"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:4730"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:4731"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:4732"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:4756"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssh security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:47757"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:47892"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:47915"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:47930"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:47939"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:48033"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl:5.32 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:48225"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:48238"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:48253"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:48279"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libsolv security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:48818"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:49361"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:49661"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:49665"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: p11-kit security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:49667"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: p11-kit security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:49668"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libtiff security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:49671"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: delve security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:49703"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libgcrypt security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:50144"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libgcrypt security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:50147"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.19.3 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:50221"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.16.12 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:50223"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl:5.32 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:50262"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.18.8 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:50263"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:50319"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:50336"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libarchive security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:5063"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:50807"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpng security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:50808"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libpq security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:50863"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glib2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:51185"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:52399"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:52414"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libarchive security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:52674"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libarchive security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:52675"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libgcrypt security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:52950"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libgcrypt security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:52951"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:53069"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:5315"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:53298"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:53467"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPM Release"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:5396"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:54371"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python-idna security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:54481"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:54530"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:54534"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nghttp2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:54650"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nghttp2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:54662"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPM Release"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:5475"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:54751"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:54869"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: curl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:55432"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: curl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:55439"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glib2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:55440"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: curl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:55450"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:55541"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:55601"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:55603"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:5581"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:5599"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:5602"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:56097"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: attr security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:56133"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:56636"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libarchive security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:56954"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:56984"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glib2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:57015"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:57604"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:57614"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:57660"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:58420"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:58503"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:58563"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:58902"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: sqlite security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:58927"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: sqlite security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:58936"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:58971"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:59009"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: ncurses security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:5913"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:59135"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:59136"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:59137"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:59216"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:59220"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:59362"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: pam security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:59379"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: attr security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:59380"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:59490"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.26 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:59496"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:59641"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.17.7 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:5970"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:59721"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:5994"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6016"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: attr security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:60226"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:60305"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: golang security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:60306"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxml2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:60394"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:60451"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:60511"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:60853"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:60865"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: pam security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:61229"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxml2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:61247"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus-broker security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:61340"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: dbus-broker security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:61355"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:61376"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:61383"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:61386"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: tar security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:61581"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: tar security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:61586"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gzip security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:61623"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gzip security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:61625"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: sqlite security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:61697"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:61737"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6182"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: golang security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:61882"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6190"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6206"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:62219"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6234"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6235"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:62416"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6256"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:62583"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6302"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:63024"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6311"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:63161"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:63162"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.19.4 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:63385"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.18.9 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:63386"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:63388"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:63403"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:63514"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6407"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6408"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.26 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6427"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:64463"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssh security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6463"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:64766"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: xz security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:64787"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glib2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:64799"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glib2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:64800"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: acl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:64805"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: expat security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:64810"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: expat security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:64812"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: pam security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:64815"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:64817"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6502"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:65339"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6539"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6540"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:65505"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:65525"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:65531"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:65568"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glib2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:65767"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: delve security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:65918"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:66076"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6617"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6619"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6620"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: coreutils security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:66403"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:66514"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:66542"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:66637"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: acl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67140"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: acl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67142"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: acl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67144"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67154"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67155"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67156"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67162"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67165"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6725"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl:5.32 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67278"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.26 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67283"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: rust security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67285"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: rust security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67286"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6729"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6730"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67308"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6731"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67314"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67315"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6732"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6736"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: rsync security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67462"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: rsync security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67463"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67534"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67572"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67575"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67607"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67635"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: postgresql:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67848"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: coreutils security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67886"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libevent security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67909"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libevent security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67910"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67961"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:67977"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:68135"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:68154"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: rsync security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6825"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:68711"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6893"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6906"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6907"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: curl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:69125"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: curl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:69126"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:69128"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssh security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:69129"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssh security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:69130"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:6923"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:69276"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libarchive security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:69553"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:69612"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7002"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:70254"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: tar security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:70390"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxml2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:70596"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7065"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:70719"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7080"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libtiff security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7081"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:70818"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7098"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7123"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glib2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:71404"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:71542"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxml2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:71585"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libxml2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:71586"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:71655"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: acl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:71656"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7180"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7244"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:72465"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:72466"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:72503"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: curl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:72506"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7261"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7263"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: expat security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:72663"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: acl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:72819"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: acl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:72820"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7299"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7302"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libtiff security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7304"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7310"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7316"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gdb security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:73426"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gdb security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:73427"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gawk security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:73429"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nginx:1.26 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7343"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7350"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gawk security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:73512"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7361"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:73838"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssh security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:73954"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssh security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:73955"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: expat security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:74001"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:74085"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:74162"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7432"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.19.5 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:74503"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.18.10 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:74504"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.17.12 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:74505"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Satellite 6.16.14 Async Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:74506"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:74569"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7458"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:74587"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:74599"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:74606"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7461"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7473"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7477"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:74870"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:74922"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:74952"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:74972"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7500"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7503"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7504"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7519"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7545"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7553"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7578"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:75864"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:75870"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7604"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7647"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7656"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7661"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nghttp2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7666"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:24 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7670"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:76750"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glibc security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:76781"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:76918"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7701"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:77017"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:77020"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: python3.12 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:77028"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7711"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:77236"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:77255"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:77396"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:77484"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:77775"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:77932"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:77939"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:77959"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7896"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:79278"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glibc security, bug fix, and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:79281"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7933"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:79717"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:7983"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:80330"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:80349"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:80360"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:80394"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:80481"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gd security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:80500"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: curl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:80511"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: curl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:80512"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: environment-modules security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:80664"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl:5.32 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:8096"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gd security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:81517"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gd security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:81518"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: pcre2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:81522"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: pcre2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:81532"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:82247"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:82359"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:82378"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:82418"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:82447"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: vim security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:8259"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: pcre2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:82845"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:82895"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:8339"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:83427"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:8346"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:83617"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:83849"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:83879"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:84420"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:84572"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssl security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:84573"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gd security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:84579"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gd security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:84580"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: gd security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:84581"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl-URI security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:84587"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: perl-URI security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:84588"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:84589"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: environment-modules security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:84594"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:8466"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs22 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:84703"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: glibc security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:84753"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:84849"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libarchive security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:8492"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:8579"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: postgresql:18 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:85814"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: openssh security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:85847"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:8822"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:8824"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: libarchive security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:8865"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nghttp2 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:8868"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:8944"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:9228"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:9438"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:9711"
},
{
"notes": [
{
"category": "description",
"text": "Red Hat Security Advisory: nodejs:20 security update"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0331"
]
},
"title": "RHSA-2026:9874"
},
{
"notes": [
{
"category": "description",
"text": "difference is unmaintained"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0297",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2020-0095"
},
{
"notes": [
{
"category": "description",
"text": "serde_cbor is unmaintained"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0298",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2021-0127"
},
{
"notes": [
{
"category": "description",
"text": "ansi_term is Unmaintained"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0299",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2021-0139"
},
{
"notes": [
{
"category": "description",
"text": "Potential unaligned read"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0283",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2021-0145"
},
{
"notes": [
{
"category": "description",
"text": "`encoding` is unmaintained"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0300",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2021-0153"
},
{
"notes": [
{
"category": "description",
"text": "Incorrect escaping for `url(\"\")` functions in CSS style attributes"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0285",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2021-0157"
},
{
"notes": [
{
"category": "description",
"text": "XSS in ammonia via SVG `animateMotion`, `animateTransform`, and/or `animateColor` tags"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0285",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2021-0158"
},
{
"notes": [
{
"category": "description",
"text": "Multiple soundness issues in `owning_ref`"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0258",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2022-0040"
},
{
"notes": [
{
"category": "description",
"text": "multipart is Unmaintained"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0301",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2023-0050"
},
{
"notes": [
{
"category": "description",
"text": "proc-macro-error is unmaintained"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0302",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2024-0370"
},
{
"notes": [
{
"category": "description",
"text": "`atty` is unmaintained"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0283",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2024-0375"
},
{
"notes": [
{
"category": "description",
"text": "`instant` is unmaintained"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0303",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2024-0384"
},
{
"notes": [
{
"category": "description",
"text": "paste - no longer maintained"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0304",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2024-0436"
},
{
"notes": [
{
"category": "description",
"text": "Risk of buffer overflow in `PyString::from_object`"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0152",
"CSAFPID-0153",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.24.1 or later.",
"product_ids": [
"CSAFPID-0152",
"CSAFPID-0153",
"CSAFPID-0331"
]
}
],
"title": "RUSTSEC-2025-0020"
},
{
"notes": [
{
"category": "description",
"text": "async-std has been discontinued"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0305",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2025-0052"
},
{
"notes": [
{
"category": "description",
"text": "Incorrect handling of embedded SVG and MathML leads to mutation XSS after removal"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0285",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 4.1.2 or later.",
"product_ids": [
"CSAFPID-0285",
"CSAFPID-0331"
]
}
],
"title": "RUSTSEC-2025-0071"
},
{
"notes": [
{
"category": "description",
"text": "number_prefix crate is unmaintained"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0306",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2025-0119"
},
{
"notes": [
{
"category": "description",
"text": "rustls-pemfile is unmaintained"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0307",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2025-0134"
},
{
"notes": [
{
"category": "description",
"text": "Bincode is unmaintained"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0308",
"CSAFPID-0309",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2025-0141"
},
{
"notes": [
{
"category": "description",
"text": "Potential Undefined Behaviors in `Arc<T>`/`Rc<T>` impls of `from_value` on OOM"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0310",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.7.46 or later.",
"product_ids": [
"CSAFPID-0310",
"CSAFPID-0331"
]
}
],
"title": "RUSTSEC-2026-0001"
},
{
"notes": [
{
"category": "description",
"text": "Rand is unsound with a custom logger using `rand::rng()`"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0279",
"CSAFPID-0280",
"CSAFPID-0281",
"CSAFPID-0282",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.8.6 or later.",
"product_ids": [
"CSAFPID-0279",
"CSAFPID-0280",
"CSAFPID-0281",
"CSAFPID-0282",
"CSAFPID-0331"
]
}
],
"title": "RUSTSEC-2026-0097"
},
{
"notes": [
{
"category": "description",
"text": "Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0153",
"CSAFPID-0154",
"CSAFPID-0155",
"CSAFPID-0156",
"CSAFPID-0157",
"CSAFPID-0158",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.29.0 or later.",
"product_ids": [
"CSAFPID-0153",
"CSAFPID-0154",
"CSAFPID-0155",
"CSAFPID-0156",
"CSAFPID-0157",
"CSAFPID-0158",
"CSAFPID-0331"
]
}
],
"title": "RUSTSEC-2026-0176"
},
{
"notes": [
{
"category": "description",
"text": "Missing `Sync` bound on `PyCFunction::new_closure` closures"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0152",
"CSAFPID-0153",
"CSAFPID-0154",
"CSAFPID-0155",
"CSAFPID-0156",
"CSAFPID-0157",
"CSAFPID-0158",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.29.0 or later.",
"product_ids": [
"CSAFPID-0152",
"CSAFPID-0153",
"CSAFPID-0154",
"CSAFPID-0155",
"CSAFPID-0156",
"CSAFPID-0157",
"CSAFPID-0158",
"CSAFPID-0331"
]
}
],
"title": "RUSTSEC-2026-0177"
},
{
"notes": [
{
"category": "description",
"text": "Unchecked pointer offset in crate `memmap2`"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0311",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.9.11 or later.",
"product_ids": [
"CSAFPID-0311",
"CSAFPID-0331"
]
}
],
"title": "RUSTSEC-2026-0186"
},
{
"notes": [
{
"category": "description",
"text": "Unsoundness in `Error::downcast_mut()`"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0312",
"CSAFPID-0313",
"CSAFPID-0314",
"CSAFPID-0315",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 1.0.103 or later.",
"product_ids": [
"CSAFPID-0312",
"CSAFPID-0313",
"CSAFPID-0314",
"CSAFPID-0315",
"CSAFPID-0331"
]
}
],
"title": "RUSTSEC-2026-0190"
},
{
"notes": [
{
"category": "description",
"text": "Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0316",
"CSAFPID-0317",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.9.20 or later.",
"product_ids": [
"CSAFPID-0316",
"CSAFPID-0317",
"CSAFPID-0331"
]
}
],
"title": "RUSTSEC-2026-0204"
},
{
"notes": [
{
"category": "description",
"text": "`Array::insert` violates exception safety if compare function panics, leading to potential Double-Free"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0318",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 3.8.4 or later.",
"product_ids": [
"CSAFPID-0318",
"CSAFPID-0331"
]
}
],
"title": "RUSTSEC-2026-0205"
},
{
"notes": [
{
"category": "description",
"text": "`event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot`"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0319",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 5.4.2 or later.",
"product_ids": [
"CSAFPID-0319",
"CSAFPID-0331"
]
}
],
"title": "RUSTSEC-2026-0221"
},
{
"notes": [
{
"category": "description",
"text": "Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0310",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.8.17 or later.",
"product_ids": [
"CSAFPID-0310",
"CSAFPID-0331"
]
}
],
"title": "RUSTSEC-2026-0235"
},
{
"notes": [
{
"category": "description",
"text": "Potential use-after-free due to lack of panic safety in `LruCache::pop()`"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0320",
"CSAFPID-0331"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Upgrade to 0.18.2 or later.",
"product_ids": [
"CSAFPID-0320",
"CSAFPID-0331"
]
}
],
"title": "RUSTSEC-2026-0253"
},
{
"notes": [
{
"category": "description",
"text": "h2 unbounded empty DATA frames"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0321",
"CSAFPID-0322",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2026-0258"
},
{
"notes": [
{
"category": "description",
"text": "TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0254",
"CSAFPID-0255",
"CSAFPID-0256",
"CSAFPID-0257",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2026-0285"
},
{
"notes": [
{
"category": "description",
"text": "Decompression bomb in `ruzstd`: a tiny input can exhaust memory (OOM)"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0323",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2026-0344"
},
{
"notes": [
{
"category": "description",
"text": "`Debug` impls for client session values expose TLS secrets"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0254",
"CSAFPID-0255",
"CSAFPID-0256",
"CSAFPID-0257",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2026-0346"
},
{
"notes": [
{
"category": "description",
"text": "Brotli certificate decompression can allocate up to 1 GiB before authentication"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0254",
"CSAFPID-0255",
"CSAFPID-0256",
"CSAFPID-0257",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2026-0348"
},
{
"notes": [
{
"category": "description",
"text": "Unauthenticated ServerHello can downgrade later connections to classical key exchange"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0254",
"CSAFPID-0255",
"CSAFPID-0256",
"CSAFPID-0257",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2026-0349"
},
{
"notes": [
{
"category": "description",
"text": "Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0324",
"CSAFPID-0325",
"CSAFPID-0326",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2026-0367"
},
{
"notes": [
{
"category": "description",
"text": "zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0324",
"CSAFPID-0325",
"CSAFPID-0326",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2026-0368"
},
{
"notes": [
{
"category": "description",
"text": "ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0324",
"CSAFPID-0325",
"CSAFPID-0326",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2026-0369"
},
{
"notes": [
{
"category": "description",
"text": "Missing case-insensitive matching for CSS url function"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0285",
"CSAFPID-0331"
]
},
"title": "RUSTSEC-2026-0373"
}
]
}