{"grype_matches":[{"artifact":{"id":"69e6a1c5ecf42d6c","cpes":["cpe:2.3:a:libevent:libevent:2.1.12-stable-10ubuntu0.2:*:*:*:*:*:*:*"],"name":"libevent","purl":"pkg:deb/ubuntu/libevent@2.1.12-stable-10ubuntu0.2?distro=ubuntu","type":"deb","version":"2.1.12-stable-10ubuntu0.2","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libevent-2.1.so.7.0.1","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/libevent-2.1.so.7.0.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-63379","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libevent","version":"2.1.12-stable-10ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-63379","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-63379","cwe":"CWE-444","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-63379","date":"2026-11-12","epss":0.00518,"percentile":0.44579}],"risk":0.259,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-63379"},"relatedVulnerabilities":[{"id":"CVE-2026-63379","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63379","cwe":"CWE-444","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-63379","date":"2026-11-12","epss":0.00518,"percentile":0.44579}],"urls":["https://github.com/libevent/libevent/commit/87e8e44fa774e9677b089b1a5114ee68aefa1636","https://github.com/libevent/libevent/commit/b847071141b3827900d536594ec9045eb0a4c485","https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable","https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha","https://github.com/libevent/libevent/security/advisories/GHSA-2gmv-p5m7-98p6"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63379","description":"Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunked HTTP trailers in http.c through evhttp_read_trailer and merges them into request headers. The fix introduces evhttp_parse_headers_impl_ and a temporary trailer header list. An unauthenticated remote attacker can place security-sensitive fields in trailers so that an upstream proxy and the libevent application interpret different effective headers, enabling header smuggling, authorization bypass, proxy-header spoofing, or cache poisoning. The fix parses trailers into a temporary header list and discards them instead of merging them into req->input_headers. This issue is fixed in versions 2.1.13 and 2.2.2-alpha."}]},{"artifact":{"id":"c24d209adb556127","cpes":["cpe:2.3:a:cyrus-sasl2:cyrus-sasl2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:cyrus-sasl2:cyrus_sasl2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl2:cyrus-sasl2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl2:cyrus_sasl2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:cyrus:cyrus-sasl2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:cyrus:cyrus_sasl2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*"],"name":"cyrus-sasl2","purl":"pkg:deb/ubuntu/cyrus-sasl2@2.1.28%2Bdfsg1-9ubuntu3?distro=ubuntu","type":"deb","version":"2.1.28+dfsg1-9ubuntu3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/sasl2/libanonymous.so.2.0.25","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/sasl2/libanonymous.so.2.0.25","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/sasl2/libcrammd5.so.2.0.25","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/sasl2/libcrammd5.so.2.0.25","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/sasl2/libdigestmd5.so.2.0.25","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/sasl2/libdigestmd5.so.2.0.25","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/sasl2/liblogin.so.2.0.25","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/sasl2/liblogin.so.2.0.25","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/sasl2/libntlm.so.2.0.25","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/sasl2/libntlm.so.2.0.25","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/sasl2/libplain.so.2.0.25","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/sasl2/libplain.so.2.0.25","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/sasl2/libsasldb.so.2.0.25","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/sasl2/libsasldb.so.2.0.25","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/sasl2/libscram.so.2.0.25","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/sasl2/libscram.so.2.0.25","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-107161","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"cyrus-sasl2","version":"2.1.28+dfsg1-9ubuntu3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107161","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107161","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-107161","date":"2026-11-12","epss":0.00376,"percentile":0.32022}],"risk":0.188,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107161"},"relatedVulnerabilities":[{"id":"CVE-2026-107161","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107161","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-107161","date":"2026-11-12","epss":0.00376,"percentile":0.32022}],"urls":["https://access.redhat.com/security/cve/CVE-2026-107161","https://bugzilla.redhat.com/show_bug.cgi?id=2460420","http://www.openwall.com/lists/oss-security/2026/10/09/20","https://lists.debian.org/debian-lts-announce/2026/10/msg00064.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107161","description":"A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting (escaping special characters) makes the value longer. The under-sized buffer is then passed to strcat(), causing a heap-based out-of-bounds write whose size depends on attacker-controlled input. A malicious or on-path DIGEST-MD5 (or HTTP Digest) server can trigger this flaw in a connecting client by supplying a crafted challenge field, such as realm or nonce, most likely resulting in a crash of the client application."}]},{"artifact":{"id":"5c2c4db26d4ad61c","cpes":["cpe:2.3:a:openssl:openssl:3.5.5-1ubuntu3.7:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3.7?distro=ubuntu","type":"deb","version":"3.5.5-1ubuntu3.7","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libssl.so.3","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/libssl.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-95692","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openssl","version":"3.5.5-1ubuntu3.7"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-95692","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-95692","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-95692","date":"2026-11-12","epss":0.00211,"percentile":0.11382}],"risk":0.1055,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-95692"},"relatedVulnerabilities":[{"id":"CVE-2026-95692","cvss":[],"cwes":[{"cve":"CVE-2026-95692","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-95692","date":"2026-11-12","epss":0.00211,"percentile":0.11382}],"urls":["https://github.com/openssl/openssl/commit/257a3427aa0ef8d9dd2ef5b3e2d1c021a221b116","https://github.com/openssl/openssl/commit/510872388f5d145cf870868b3d288a23822cb776","https://github.com/openssl/openssl/commit/70a47ac78b6f3be1b22fb1551bd0bfcff4f29613","https://openssl-library.org/news/secadv/20261110.txt"],"severity":"Unknown","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95692","description":"Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce\nlength via EVP_CipherInit_ex() may trigger a heap out-of-bounds read.\nSupplying a longer IV is silently truncated instead of rejected.\n\nImpact summary: An application passing a caller-supplied IV of the wrong\nlength may crash or read beyond its buffer. Because trailing IV bytes are\nignored, an attacker who knows one message and tag may forge messages under a\ndifferent IV.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: AES-GCM-SIV copies the caller-supplied IV or nonce into its\ninternal state using a copy whose length is taken from the expected nonce size\nrather than from the length the caller actually provided. When the caller\npasses a shorter IV, the copy reads past the end of the caller's buffer;\nAddressSanitizer confirms a heap out-of-bounds read reached through\nEVP_CipherInit_ex() into ossl_aes_gcm_siv_init(). When the caller passes a\nlonger IV, the implementation silently discards the trailing bytes instead of\nrejecting the length.\n\nThe truncation breaks the binding between the IV and the computed\nauthentication tag. An attacker who has observed a message and its tag under\none IV can produce a message and tag that verify under a different IV whose\nfirst bytes match, since the surplus bytes never influence the computation.\nThe message itself is unchanged, so this is a failure of IV commitment rather\nthan a classic existential forgery.\n\nOnly applications that call EVP_CipherInit_ex() (or the equivalent provider\ncipher initialization) with an IV length other than the standard 12 bytes for\nAES-GCM-SIV are affected. The severity is limited because the out-of-bounds\nread is small and attacker-controlled only in length, and the forgery requires\nan unusual IV length choice by the application.\n\nFIPS impact: no\nThe FIPS modules are not affected by this issue, as AES-GCM-SIV is not an\napproved algorithm."}]},{"artifact":{"id":"5c2c4db26d4ad61c","cpes":["cpe:2.3:a:openssl:openssl:3.5.5-1ubuntu3.7:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3.7?distro=ubuntu","type":"deb","version":"3.5.5-1ubuntu3.7","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libssl.so.3","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/libssl.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-88822","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openssl","version":"3.5.5-1ubuntu3.7"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-88822","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-88822","cwe":"CWE-457","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-88822","date":"2026-11-12","epss":0.0019,"percentile":0.08744}],"risk":0.095,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-88822"},"relatedVulnerabilities":[{"id":"CVE-2026-88822","cvss":[],"cwes":[{"cve":"CVE-2026-88822","cwe":"CWE-457","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-88822","date":"2026-11-12","epss":0.0019,"percentile":0.08744}],"urls":["https://github.com/openssl/openssl/commit/1a73dc590cbad62d6f0329ea4779eadaa8d8fd75","https://github.com/openssl/openssl/commit/7b4f5344aa0401e7b777640050b5257ed2a70e88","https://github.com/openssl/openssl/commit/911eee8eb7550b95a206f1ad8cbdb986098982f3","https://openssl-library.org/news/secadv/20261110.txt"],"severity":"Unknown","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-88822","description":"Issue summary: QUIC, when performing automated peer detection, may allow\nuninitialized stack data to leak into the received address which is then used\nas the destination for outgoing packets.\n\nImpact summary: Applications using QUIC's automated peer detection mechanism\nmay receive an invalid address, leading to connection loss and disclosure of\nuninitialized stack data to an attacker observing the outgoing network traffic.\n\nCWE: CWE-457 (Use of Uninitialized Variable)\n\nDescription: The OpenSSL QUIC stack contains a feature in which, when using an\nalready connected socket, it will auto-detect the peer address during the SSL\nhandshake.  This feature uses the getpeername() function, passing a buffer of\nsufficient length to hold any supported address family, but passes a buffer\nlength that is only sized such that larger addresses, such as IPv6, cannot be\nretrieved. The getpeername() function however, still returns the full address\nlength, which is accepted as the valid input buffer length, leading to the\naddress buffer containing uninitialized stack data instead of the actual peer\naddress. The invalid peer address is then used as destination for the outgoing\npackets which leads to a connectivity breakage and a leakage of the\nuninitialized stack data to passive network observers.\n\nFIPS impact: no\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE as\nthe affected protocol is not implemented in the FIPS module."}]},{"artifact":{"id":"5c2c4db26d4ad61c","cpes":["cpe:2.3:a:openssl:openssl:3.5.5-1ubuntu3.7:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3.7?distro=ubuntu","type":"deb","version":"3.5.5-1ubuntu3.7","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libssl.so.3","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/libssl.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-95691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openssl","version":"3.5.5-1ubuntu3.7"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-95691","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-95691","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-95691","date":"2026-11-12","epss":0.0019,"percentile":0.08743}],"risk":0.095,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-95691"},"relatedVulnerabilities":[{"id":"CVE-2026-95691","cvss":[],"cwes":[{"cve":"CVE-2026-95691","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-95691","date":"2026-11-12","epss":0.0019,"percentile":0.08743}],"urls":["https://github.com/openssl/openssl/commit/dd90ceb99a3c2ddba336bb4a00be9ebabd84c2a1","https://github.com/openssl/openssl/commit/ec9d4de9d03989b29db5a3d7efdb4c285deaf386","https://github.com/openssl/openssl/commit/f6244675833e097c2429a40d1b206d95385bd42f","https://openssl-library.org/news/secadv/20261110.txt"],"severity":"Unknown","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95691","description":"Issue summary: A retransmitted QUIC CRYPTO frame can release packet storage\nwhile the TLS record layer retains a direct pointer into that storage causing\nuse after free.\n\nImpact summary: A malicious QUIC server can cause a heap-use-after-free read\nin the OpenSSL QUIC client. The server can also identify one allocator-adjacent\nbyte through the client's protected Handshake response.\n\nCWE: CWE-416: Use After Free\n\nDescription: During CRYPTO stream processing, a pointer into the first frame's\nmemory on the stream is lent to the TLS handshake processing. The memory\nmust remain stable until it is processed and released. However the processing\nof retransmitted CRYPTO frames could release the memory if the retransmitted\nframe fully overlapped the existing frame. This then causes use-after-free read\nwhen the TLS handshake processing continues.\n\nThe use-after-free read can lead to a Denial-of-Service of the client\napplication or a minor leak of information about the heap memory contents\nthat might be overwritten with other data, subsequently allocated by\nthe application, to the peer.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"f19767660d7ddb63","cpes":["cpe:2.3:a:golang:go:1.27.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.3","type":"go-module","version":"go1.27.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.3"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6859","versionConstraint":"<1.26.11||>=1.27.0-0,<1.27.4 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6859","fix":{"state":"fixed","versions":["1.26.11","1.27.4"],"available":[{"date":"2026-11-10","kind":"release","version":"1.26.11"},{"date":"2026-11-10","kind":"release","version":"1.27.4"}]},"cvss":[],"epss":[{"cve":"CVE-2026-97054","date":"2026-11-12","epss":0.00171,"percentile":0.0656}],"risk":0.08549999999999999,"urls":["https://go.dev/issue/82563","https://groups.google.com/g/golang-announce/c/iY8TY0wWgbM"],"severity":"Unknown","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/862185","description":"For HTTP/1 servers, when MaxBytesReader's limit is exceeded, \"Connection: close\" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. As a result, an HTTP/1 server that utilizes MaxBytesReader or MaxBytesHandler can crash due to runtime panic if its handler reads the request body concurrently with writing the response header."},"relatedVulnerabilities":[{"id":"CVE-2026-97054","cvss":[],"epss":[{"cve":"CVE-2026-97054","date":"2026-11-12","epss":0.00171,"percentile":0.0656}],"urls":["https://go.dev/cl/862185","https://go.dev/issue/82563","https://groups.google.com/g/golang-announce/c/iY8TY0wWgbM","https://pkg.go.dev/vuln/GO-2026-6859"],"severity":"Unknown","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97054","description":"For HTTP/1 servers, when MaxBytesReader's limit is exceeded, \"Connection: close\" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. As a result, an HTTP/1 server that utilizes MaxBytesReader or MaxBytesHandler can crash due to runtime panic if its handler reads the request body concurrently with writing the response header."}]},{"artifact":{"id":"5c2c4db26d4ad61c","cpes":["cpe:2.3:a:openssl:openssl:3.5.5-1ubuntu3.7:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3.7?distro=ubuntu","type":"deb","version":"3.5.5-1ubuntu3.7","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libssl.so.3","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/libssl.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-88823","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openssl","version":"3.5.5-1ubuntu3.7"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-88823","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-88823","cwe":"CWE-325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-88823","date":"2026-11-12","epss":0.00142,"percentile":0.03614}],"risk":0.07100000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-88823"},"relatedVulnerabilities":[{"id":"CVE-2026-88823","cvss":[],"cwes":[{"cve":"CVE-2026-88823","cwe":"CWE-325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-88823","date":"2026-11-12","epss":0.00142,"percentile":0.03614}],"urls":["https://github.com/openssl/openssl/commit/159e1de0c448d7b9f09ad768c8e141def4aa1eb4","https://github.com/openssl/openssl/commit/2f5fc833ff9b5bfe00b32f8b5c74f73c5773c682","https://github.com/openssl/openssl/commit/6747b1a278816dd7db46438040a70b0b5e5e0a90","https://openssl-library.org/news/secadv/20261110.txt"],"severity":"Unknown","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-88823","description":"Issue summary: The AES-GCM-SIV implementation treats a zero-length Additional\nAuthenticated Data (AAD) update as a reset of all the AAD supplied so far,\ninstead of leaving the AAD unchanged. An application that supplies its AAD in\nseveral fragments, one of which is empty, therefore produces or verifies\nmessages whose authentication tag does not cover the AAD supplied before\nthe empty fragment.\n\nImpact summary: Data an application intended to authenticate alongside a\nmessage is silently left unauthenticated. An attacker can forge the AAD of such\na message.\n\nCWE: CWE-325: Missing Cryptographic Step\n\nDescription: An application passing AAD in multiple chunks of which some have\nzero length will have the previous AAD chunks effectively unauthenticated. Also,\non context re-initialisation, the AAD was not reset, which meant that any AAD\naccumulated from the previous context usage were also included in the AAD of the\nnew message.\n\nThe fix makes a zero-length AAD update a no-op and clears any accumulated AAD\nwhenever the context is re-initialised with a key or a nonce.\nA re-initialisation that only changes parameters keeps the AAD.\n\nFIPS impact: no\nThe FIPS modules are not affected, as AES-GCM-SIV is not a FIPS approved\nalgorithm and is implemented only in the default provider, outside the\nOpenSSL FIPS module boundary."}]},{"artifact":{"id":"69e6a1c5ecf42d6c","cpes":["cpe:2.3:a:libevent:libevent:2.1.12-stable-10ubuntu0.2:*:*:*:*:*:*:*"],"name":"libevent","purl":"pkg:deb/ubuntu/libevent@2.1.12-stable-10ubuntu0.2?distro=ubuntu","type":"deb","version":"2.1.12-stable-10ubuntu0.2","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libevent-2.1.so.7.0.1","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/libevent-2.1.so.7.0.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-63380","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libevent","version":"2.1.12-stable-10ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-63380","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-63380","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-63380","cwe":"CWE-476","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-63380","date":"2026-11-12","epss":0.0014,"percentile":0.03439}],"risk":0.06999999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-63380"},"relatedVulnerabilities":[{"id":"CVE-2026-63380","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63380","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-63380","cwe":"CWE-476","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-63380","date":"2026-11-12","epss":0.0014,"percentile":0.03439}],"urls":["https://github.com/libevent/libevent/commit/825c18bd99f556b59d61200523237f264d5cc734","https://github.com/libevent/libevent/releases/tag/release-2.2.2-alpha","https://github.com/libevent/libevent/security/advisories/GHSA-3rpf-frgx-xq34"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63380","description":"Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evws_new_session enters its error path after evhttp_start_ws_ succeeds but bufferevent_enable_locking_ fails. evws_connection_free sees a non-null http_server and unconditionally calls TAILQ_REMOVE even though the session was never inserted into http_server->ws_sessions. A local caller able to induce this allocation or locking failure can crash the process. This issue is fixed in version 2.2.2-alpha."}]},{"artifact":{"id":"5c2c4db26d4ad61c","cpes":["cpe:2.3:a:openssl:openssl:3.5.5-1ubuntu3.7:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3.7?distro=ubuntu","type":"deb","version":"3.5.5-1ubuntu3.7","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libssl.so.3","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/libssl.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","layerID":"sha256:5d94579817fa6a5cd004b084683c3e965da5f3d7dcb65255fbfbe80287a8e152","accessPath":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-107496","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openssl","version":"3.5.5-1ubuntu3.7"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107496","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107496","cwe":"CWE-835","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-107496","date":"2026-11-12","epss":0.00127,"percentile":0.02392}],"risk":0.0635,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107496"},"relatedVulnerabilities":[{"id":"CVE-2026-107496","cvss":[],"cwes":[{"cve":"CVE-2026-107496","cwe":"CWE-835","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-107496","date":"2026-11-12","epss":0.00127,"percentile":0.02392}],"urls":["https://github.com/openssl/openssl/commit/36e15b618decdff1b116eead6747718e6e729ad2","https://github.com/openssl/openssl/commit/a0051cfe699bf5a047bc1c4faef65f80f7987366","https://github.com/openssl/openssl/commit/a8531368ddb1f86d2a2782a8b693926bb67b59e7","https://openssl-library.org/news/secadv/20261110.txt"],"severity":"Unknown","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107496","description":"Issue summary: Encrypting a CMS message to an EC certificate whose group order\nis 1 may cause CMS_encrypt() or CMS_encrypt_ex() to loop indefinitely.\n\nImpact summary: An attacker able to supply the recipient certificate to an\napplication performing CMS encryption can cause that application to loop\nindefinitely, consuming CPU and resulting in Denial of Service.\n\nCWE: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')\n\nDescription: CMS_encrypt() and CMS_encrypt_ex() encrypt a message to one or\nmore recipient certificates and, for an EC recipient, generate an ephemeral\nkey in the recipient's group. If the certificate declares a group order of 1,\nrandom scalar generation can only produce zero. The key generation routine\nthen retries without limit while waiting for a nonzero private scalar, so the\ncall never returns.\n\nThe OpenSSL TLS and QUIC implementations do not use this path. An application\nis exposed only if it calls CMS_encrypt() or CMS_encrypt_ex() with a recipient\ncertificate whose EC parameters are attacker-controlled. Certificates with\nnormal EC group orders do not trigger the loop.\n\nOpenSSL 4.0 and later reject unknown explicit EC groups in default builds.\nThese versions are affected only when configured with the\nenable-ec_explicit_curves option.\n\nThe result is a hang that consumes a CPU core until the process is\ninterrupted, a Denial of Service. The severity is Low because the attacker\nmust supply the recipient certificate and the application must choose to\nencrypt to it; ordinary CMS encryption to trusted recipients is unaffected.\n\nThe fix makes EC key generation fail when the group has no valid nonzero\nprivate scalar, instead of retrying indefinitely.\n\nFIPS impact: no\nThe FIPS modules in 4.1, 4.0, 3.5 and 3.0 are not affected. The FIPS provider\ndoes not support arbitrary explicit EC domain parameters, so an order-1 group\nis rejected during key import before the vulnerable key generation path is\nreached."}]}],"grade":"A","score":"100.00","as_of":"2026-11-14T07:51:55.230Z","grype_db_version":"2026-11-13T15:40:34.000Z"}